Extracted

• • Target

    2024-12-26_b3868fa414b8a5ff3c97ecf08f496deb_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    b3868fa414b8a5ff3c97ecf08f496deb

  • SHA1

    2736b4115b080852b1c75dd7fa5f6b432b86e14c

  • SHA256

    9af16bd5d445787bdd5d68eecc409b1cc71008a30d3a8e113ce1a23f0c2292b3

  • SHA512

    169604766b0c8bab99e9c2b36bbd096664a06b8e5ff1ae1cf79e61317dff41ba323459b5fc184625b7d13163379c469db8fd13b39c7578bfebd2e0dfb7f5b58d

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZSTGCq2iW7z:fhAWJGSCTBf12ZcGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2