Extracted

• • Target

    2025-01-21_5f278af6ef982c0cab08542b16cee1ab_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    5f278af6ef982c0cab08542b16cee1ab

  • SHA1

    b41ccf2ef2b8a92f109b2f9837868024c02853e4

  • SHA256

    03add1b2507139434770da614774fddd8beaee7fa240c0982611946e62964998

  • SHA512

    e9a7c94ee5b2679645ffb9ba1b410dfc6f1e3b999234aceba6f45e1687cc2a367a343c7615f164ab5b99dc6b3ab1099678cf383480a91c6f52dba9e365e70fa4

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQwqGCq2iW7z:Hk3U8kTQrGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2