Extracted

• • Target

    2025-01-16_e7375fc8494039dd84ad347e2f458c28_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    e7375fc8494039dd84ad347e2f458c28

  • SHA1

    56c197b978fa405e8130acf785b70682bf1f6d7d

  • SHA256

    05d3bb632a9bab889b30844ca6fb30b1c4b2d36446cfa00864f699fb5cfcdb68

  • SHA512

    2c4319769cd12c2d0d77657d21a21aa7f9bc6cf9c0b346f254b1a28a462d8edf6a96ffeb4a8f73fcc5659f7ddc6bbc2ccaa514c842dab726df1ca8e767bde84e

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ58GCq2iW7z:Y3ysTGhQOGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2