Extracted

• • Target

    2024-12-28_5ea9a8aaeff68c407705de9949086125_icedid_smoke-loader_wapomi

  • Size

    1.4MB

  • MD5

    5ea9a8aaeff68c407705de9949086125

  • SHA1

    5f5c2ef9d00cd6db329579b0233ae611ca4a60e3

  • SHA256

    b3a004531619eb2f9aa592b4dede339d24e5ae542ff35d29a9e5fd2f3e4a2147

  • SHA512

    2b4d7adf467f2a3dd31e27b5e2ea7237c50bcd4cc37b1c492dff923cf1b8d74038d9f1ba2c02400458b2f591f53093df2a6a6d7b58820835914e28e89d753187

  • SSDEEP

    24576:jbati2A+N8tFzN9tZ9E5QC7uo0p1VW6D:jb9B+NIptZ9ygj86D

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2