Extracted

• • Target

    2025-01-02_a936f9933a3eb4f25cf7043f0700f652_icedid_smoke-loader_wapomi

  • Size

    357KB

  • MD5

    a936f9933a3eb4f25cf7043f0700f652

  • SHA1

    0dea938df4630d49eab0f407706a165e7dde896c

  • SHA256

    ef6e37cb6748e33bb4f4fbd487352b1d6199e3cb02142fc117a828f3f0e9a8eb

  • SHA512

    efcf90cf3d4d5845e85fe8f05ed694c2444a565b6f694424271f4ec9a57065410e797b6a4c4f087bd24b33cb0f2e691d33f56a836fa86e55bf6c3a4097026a76

  • SSDEEP

    6144:YznAtGqS5NjM2KbQbNYuhZ+6+eAbuQ5Zu60HnPLhDgW0uWu74P:YTLnp+BCQ5Zu60HnP1D

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2