Extracted

• • Target

    2024-12-26_aa9373ce469ccb6a65232c074f3d77ea_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    aa9373ce469ccb6a65232c074f3d77ea

  • SHA1

    85e45cfd7277a79c34de358aa441b84c75a13616

  • SHA256

    535b0b09a1f5af04d057e1c6d35d516a33db2831b27d1721ac1ca790d3fd236c

  • SHA512

    4932b5ae4eea3bea72f4b273a11514d6c5690a1461d76d1771fb90265a8efd25e4505962920a5b344221db44bacf9dc1e4765c82a9ea7fd561cf02f3a0afb33e

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ9eGCq2iW7z:Y3ysTGhQEGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2