Extracted

• • Target

    2025-01-21_5f87bf0f5e4c1434926cae939892487f_icedid_smoke-loader_wapomi

  • Size

    561KB

  • MD5

    5f87bf0f5e4c1434926cae939892487f

  • SHA1

    da73d20fdd8d712531d25870436da43195af8e31

  • SHA256

    5fe9dd44236e88faf54e3e07df6670edbd05a66280cf8b8ac19bb73bf7338485

  • SHA512

    ad1ff00fe7e710c942f7b88b53c940bbc2b20fdcbf7ea7a0d2b6b496ed8c033663f46bcd38def0891a96e247d935f91e7eab9b24179aed13dfa5f8f4b026dac8

  • SSDEEP

    12288:knsIcbXp6mxTx1H4yhMbBgOMU5ouiDaFSwNZi+s4fw:knscoyyhMbBgOrhiJSTfw

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2