Extracted

• • Target

    2024-12-25_f1a8afb41cf4bb33a3bab1301cab5cff_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    f1a8afb41cf4bb33a3bab1301cab5cff

  • SHA1

    505aeb60bf72aa797268995e94a357e3dac0fcf2

  • SHA256

    7bae3c65706a1308eae8d13e68ebd4ad8885eac16cf2192d2a9675a51b44cd44

  • SHA512

    812e915759e927023404afee9298cf204cc9f2467afc1894f208aa12cbc999530a171179e5e663fc3e6916ba170c34c3cbe84ea4f7c53c17a0787584ab27e0a5

  • SSDEEP

    1536:vfnLq01weW5yX3jFxv49Nu4GhQOfGCq2iW7z:u3ysTGhQcGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2