Extracted

• • Target

    2024-12-27_e5ce4da485e1f4b6ea91f9b47485a6df_smoke-loader_wapomi

  • Size

    208KB

  • MD5

    e5ce4da485e1f4b6ea91f9b47485a6df

  • SHA1

    12dcdfab499279c988764bb5b67b9ed97601d69b

  • SHA256

    dd0cd7312c9b9ae3f4d09e79d92f0fa30f1bbd624344f9df4b49ef12bdc846fc

  • SHA512

    824e54e17c7f5ebf68ed20e752ab9bbc49e2cc54d6f5b26579889e9b8140ad630ab37161d86245a507373b7cd29846d691134c149a4f1cc9ad288977f9c05fbd

  • SSDEEP

    3072:1W8KaJvnsgaSIwi/cJimz+zQzBYTBf9pAXAZPuYQOZGCH:qkv1IHyz+zQeTBl2Muyc

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2