Extracted

• • Target

    2024-12-26_544ab31a7e3f5be9a9e705dc27287abf_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    544ab31a7e3f5be9a9e705dc27287abf

  • SHA1

    d7c9f592a862b4e385cca8d4ac4625be8b8313cb

  • SHA256

    546fbddb1ca2b9e05c87ddbc52b8da6c41d3f524b0bfdef3a68121743cebe80e

  • SHA512

    d1fe041d0da3eb0f5ee72106843d0c0f147e88afec2d5d8b606aba8933c7d752c5e49d7f576a7385785af1766f866f9e12e40d5a6b44b72e68f723fb5f2e7032

  • SSDEEP

    1536:vfnLq01weW5yX3jFxv49Nu4GhQGUGCq2iW7z:u3ysTGhQvGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2