Extracted

• • Target

    2025-01-07_f281bfdf60aa7512abbae3a8e86f414b_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    f281bfdf60aa7512abbae3a8e86f414b

  • SHA1

    e5eaa26c7650e9b1d7c1854fea842fc83bc0fb34

  • SHA256

    b5d20f765b3ad8b368164bead1c150bd1ac990c7d0a41b074717ab02a8f2b4c5

  • SHA512

    0e3888e47a286780548c21e641b29fc348d1ad24dae31581651fb8ae1ec8fe224f7586b918446cdef09402018a3f01b34dad10e57f67dc383b9e8868c581967a

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQkyGCq2iW7z:Y3ysTGhQjGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2