Extracted

• • Target

    2024-12-25_c34c38ccc595fc182399a1ae8a550e28_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    c34c38ccc595fc182399a1ae8a550e28

  • SHA1

    b8e1fdd4bc4e537ee49730256e645220df377ab5

  • SHA256

    67de1821833cbb286d1f17010fd5e4332f009e97a60f13ac846f87bfa56edc7f

  • SHA512

    5713b2728aa4b4a6037c5e806c6b2228398b37d5d9358690053a96518b49f3020d9b33c16876b3eb754b0e614da6e5a372af279953ccfe346794e6547ce16528

  • SSDEEP

    1536:2HB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZIvGCq2iW7z:2hAWJGSCTBf12Z6GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2