Extracted

• • Target

    2024-12-26_c806cec1971ffab88a3ab286bcbbe434_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    c806cec1971ffab88a3ab286bcbbe434

  • SHA1

    b9f368ec9adfb3a947f1dbe11fd19c938d5a42ec

  • SHA256

    d16292bc56c98d0098ce43bb1bc0b526593182821cce22b78750e87cd04989bf

  • SHA512

    7e73e0c3ce49b7deeced098660cfa0eb9a6ba1941a09521751674773b365817f0dcbc904ea0a7c24e32df4749eb41e3960f61dc94475a68c7d4f0e2c90d54c43

  • SSDEEP

    1536:2HB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZPgGCq2iW7z:2hAWJGSCTBf12ZIGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2