Extracted

• • Target

    2024-12-28_b48a87f10183f3b48882662e07c2e53d_icedid_smoke-loader_wapomi

  • Size

    1008KB

  • MD5

    b48a87f10183f3b48882662e07c2e53d

  • SHA1

    52baf4eecc40f320c0b2578e1053f145c3dc8a70

  • SHA256

    4be3942a64e4c9d87c967e7e16e0110077b71fda614cc690ecd322c28d35f49f

  • SHA512

    1530049ee22299021be638c5bb56ee915e138568bacf6a09b823cd1beef32ac4412a02a41085488e3df87a4b8cddaef0da1b9238b4f6fa86535135f34fee85e1

  • SSDEEP

    12288:mPl9ecQnnkPAMz90FRzEv083cRLdPLTtruTi9+ka7gjhcrHs9ZW7Es6j6EP:oQne0FRzA0scRJPPBuTiErwcrM98D6j

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2