Extracted

• • Target

    2024-12-25_f9507da928fa9a7a8cd3d5c3e905baff_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    f9507da928fa9a7a8cd3d5c3e905baff

  • SHA1

    00fbb78297b670d867e78ff173934b7f6ad830ba

  • SHA256

    28f3be1f3255b3e64a8b4a04acdf846d9b6956ff56216bb7bbca5b141f40ae57

  • SHA512

    11869914ae21598b423ab54611ae8bbcb0b6105af37280c3522fb7a86a5b64ce68c33fc5d2aa136de2a22cb54a8278bcc8ec0b1ba562edf249e7e4ee9b403914

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ+EGCq2iW7z:Y3ysTGhQbGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2