Extracted

• • Target

    2025-01-02_d6ac231a3ec46ad7f1d69d50eaf70b3f_smoke-loader_wapomi

  • Size

    502KB

  • MD5

    d6ac231a3ec46ad7f1d69d50eaf70b3f

  • SHA1

    569ccd16fb5dc0035b5b155649ac5277c4a146e9

  • SHA256

    573188c38372af5040ca1f769fac180f559a65fad69f3bc6aceae16edf62062f

  • SHA512

    83f58f2bfa6418e59e9a1adf2a48011c4399ea15d290115fa9401c8fdd8b0b8e217ddf524336afccbd153a662740cec6387fb0a3e4ad815553a9a97101d9df54

  • SSDEEP

    12288:ameX5S785BtelhYtqc1Yz4NO2cxDBbiXHFecjxn:anD5Bt6HcQX7xNiXFecjx

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2