Extracted

• • Target

    2024-12-25_3c152686648f1d1433b80c51a1f2b582_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    3c152686648f1d1433b80c51a1f2b582

  • SHA1

    d37359fc60f0cfa703a475580b225df04e9c00d0

  • SHA256

    030351ad66d020650950df78c09923e86d94e4ba11325844a92ea73ae37a7ea8

  • SHA512

    7ab9983c512e92b23a336f909d949c5ffb33c62552498d69e61e853f2e5c0f4ac844ee44231ebf12207bfc009f9a0b9498cde8900b5b39722e913171852cbdb1

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQgBGCq2iW7z:Hk3U8kTQoGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2