Extracted

• • Target

    2025-01-02_9b86cd21a3cad98788780f701d849d41_smoke-loader_wapomi

  • Size

    36KB

  • MD5

    9b86cd21a3cad98788780f701d849d41

  • SHA1

    6b8f8b74557bd6fdfa937a5aafd3edfbed94b09a

  • SHA256

    740cd1b8829c401e85acfd56e9ede355785bb6386d58516ba5a1394aef27b21a

  • SHA512

    0bdaed5ba48cf979bdb3a275a84c251360bc98dfddfe9f5c3bb147bcce93640a6d37c302502deadd89651707a2f6e59506c8064161aee3994cb326f76436b460

  • SSDEEP

    768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n5fvQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n5foGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2