Extracted

• • Target

    2025-01-16_e9fbe8825057afd50bed83af30ec819d_smoke-loader_wapomi

  • Size

    136KB

  • MD5

    e9fbe8825057afd50bed83af30ec819d

  • SHA1

    8eed976a5d69a47ea58c8bb64df67667717c5985

  • SHA256

    0827f443374db0fe8c93fa479fa2e075fef80a45f35a71bbbe19073b6632bb04

  • SHA512

    b7b162e4720ec951007a84e3684d6919e0407b0e8b08ac0a7009902e352f91134fd85c299400735f656c06516429c6d33bd13687db1f865239623891201743a6

  • SSDEEP

    3072:6Rhm+3+lBFZBuVt5ls4qQXvvSGuIiGCH:6frubFX6s4qQXvvSDg

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2