Extracted

• • Target

    2024-12-28_bb27fcf0783de27cc76139c54d67a0ee_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    bb27fcf0783de27cc76139c54d67a0ee

  • SHA1

    cbdf19cec1a85857609b860423b1c598a9d754fa

  • SHA256

    14d9d23b215a82324dd358bf08db3ad6a6e87d733e5bb2e4813c4b2d8979b7fd

  • SHA512

    e8d69c7227f46abeece3354ae2aa7a482a4e492b7e4dc5693218a2f5fb03e0e1cc04cd64d918592005e62d09b44b3268059b4fd2fe7d963b26de6e04b03fcddc

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ7NGCq2iW7z:Y3ysTGhQ5GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2