Extracted

• • Target

    2025-01-07_dd31a3438ad427460d775bf69209b2b2_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    dd31a3438ad427460d775bf69209b2b2

  • SHA1

    3344316539a137246c053972063e95bfcf4eddc3

  • SHA256

    8676d349cc31e2213b6819a65718deb020d2c4ece28ba4e59ef526ba1c4f521e

  • SHA512

    62b76891e5bfe7b25484fe8252ab2b14d11d08816bd87fe2241e551795f25e636e82aaed0e4a150610d6b00e1074f738f4cacbe62c0ed991060e5f7229390584

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQjnGCq2iW7z:Y3ysTGhQTGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2