Extracted

• • Target

    2025-01-07_dd2cb657776b537c66b1ed2a3727e194_smoke-loader_wapomi

  • Size

    506KB

  • MD5

    dd2cb657776b537c66b1ed2a3727e194

  • SHA1

    d7fbdac8d0eea115ff45a9d149bf3de9194ce763

  • SHA256

    1bcd9f753725db468b34c91e404ab447f448792dfaa9ddace2fbbe426b41e148

  • SHA512

    6cd393b13a0009e3ec2a459149ec07ddc33dd8926fc52e9e450011a3f4a52fb963e7a86cbfff7a59c54ca350f700fac376162e0d5ebba4253b2bcfcb75c3698d

  • SSDEEP

    12288:aZxLyDV6tDqoTjsb586lK/P4OjR26YdPc4sY:aZxmV0qkIuPLjRVYdPcNY

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2