Extracted

• • Target

    2025-01-07_be58bb93c3d3c0ec2741c8546c989385_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    be58bb93c3d3c0ec2741c8546c989385

  • SHA1

    c9dcb1b1fd160e5547a36d76bc59c05e66909e92

  • SHA256

    c0b58666d46455cc422c2ed59ce676d6ec89fe56e5d908f63821022ec281a60e

  • SHA512

    e93d6a14cf12b80e859a7a2fd408182b4c3ffbe7d59fc32b10aa0f70f01fdf31b7a7a36f7e36b17be68bd1d1cb46f9ad5a5f7f9e78575f453959e1cb6eb3f8e9

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQEmGCq2iW7z:Hk3U8kTQ3GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2