Extracted

• • Target

    2024-12-26_83125ab9dfa745107a71601710d2fbfa_smoke-loader_wapomi

  • Size

    193KB

  • MD5

    83125ab9dfa745107a71601710d2fbfa

  • SHA1

    15e9191aa572f1478f6d4ba4bfbf78c323eb3a5e

  • SHA256

    3720e64a9c7bfd4d158e16924336ae553beb78313657a45d5477142b0693c017

  • SHA512

    dbf678d9a76f85b7fffa57baf21f94757889737ea8f073ee7407622d0d23d231345975e2bcd29730676c43cdc335a8d7e2b567731cb324fc448d08a6119bc989

  • SSDEEP

    6144:F8ToK31I1qZQxU4ouUnnk4LNaj8co7Ns:FHKlYqZQxUiSnkO6I7

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryspywarestealerupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2