Extracted

• • Target

    2025-01-21_1f4ef1f21b247dd569840d77cd1ea29d_smoke-loader_wapomi

  • Size

    64KB

  • MD5

    1f4ef1f21b247dd569840d77cd1ea29d

  • SHA1

    941b9f2952392ec32c836885685cad234b23bc58

  • SHA256

    554a09b7c092447a32dbb65ad47b8ff62394933412b35babf6352cfd917cc6d8

  • SHA512

    087389a8e87f5fffcc9e69618a0543b1c7cc18d7152304cab01db4ac612bad6f1d1223ab8c6dfe46f7804e614842d1706a66b59bc338f52be308eab5fb339731

  • SSDEEP

    768:7E09MOEzWGoOIx2qCZVZmj+Wg5VK2LDakrDZ5yS/wwHA49kszNAY1XKoJc4P1c2m:/7w73bUNMMkrDry+6UtctGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscoverypersistenceupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2