Extracted

• • Target

    2024-12-28_087490542c6c72de09015c89b2723367_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    087490542c6c72de09015c89b2723367

  • SHA1

    a412520825dd2e44fcf70618290217e33303567c

  • SHA256

    ffb529ce0fcea20d0132e7fce3cc5c3f6f7621c20342b5e902d606a78b64a346

  • SHA512

    a96319a1802982e7ac5d4aceeeaaa1ad695a733023fde37a193010887ae19dda494ef0d2640dd527884330c6cab5d501b6ec35a20755c5d7c50aa42a821a28ae

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQtzGCq2iW7z:Hk3U8kTQVGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2