Extracted

• • Target

    2025-01-07_1d33afa6b6fc596edac9cf180c24afdb_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    1d33afa6b6fc596edac9cf180c24afdb

  • SHA1

    6b8dc98edb19d8285e2d3899464942e6aa5309fb

  • SHA256

    fac9784d823e37eb2f14828fce6c6f479fa4efcadc1eebae75ed94b77110fba6

  • SHA512

    eb0405bf3bd528d84da3eabbcc35b65198e1d6526c4be6d04982b478c0e28c84a43776fe4605036da4835703614eaa98f2ea69ed4e39e9a88108ce6545446044

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQeDGCq2iW7z:Hk3U8kTQQGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2