Extracted

• • Target

    2024-12-25_ef487a31124c38e76b3475498ae8b2cc_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    ef487a31124c38e76b3475498ae8b2cc

  • SHA1

    59988588c019722f3b4e91e33e16ab5a171134b3

  • SHA256

    e0863f9163858e66bdbf3cefea11273ce1755bf5345e09931ae925f0073edf42

  • SHA512

    a4ff6cab3d1628bee176c4d913900f12d3b4bb6d82fa0a8f3806712acb2ead35077ad34c47c09e36aeb10e2e37fc57cde8dc322013daf298104e32aabd8bdc66

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQ/EGCq2iW7z:Hk3U8kTQMGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2