Extracted

• • Target

    2024-12-26_f34b05ff52460c722bddfb4b10af5aa2_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    f34b05ff52460c722bddfb4b10af5aa2

  • SHA1

    afbf8a8f19bd0edf0c39a91a3f3e6fb1a1e6da66

  • SHA256

    e6992d4c5165faf41025ff54daad325e6de075bd55c3e695a831e16c02d872cc

  • SHA512

    ca3c0881e852c80ee31256f6a78c721acbb1f4fad431ff0955892d379a27e5042aebf8e80f74a4d2a8bc0b8429b1c1909406854971e42970b296eb02bf431ee8

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQLSGCq2iW7z:Y3ysTGhQeGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2