Extracted

• • Target

    2025-01-21_f482f8628d2c6228ad5d2b1cdc089b6f_icedid_smoke-loader_wapomi

  • Size

    561KB

  • MD5

    f482f8628d2c6228ad5d2b1cdc089b6f

  • SHA1

    6e2d73ded040010ea239b892efc4164c9f92362a

  • SHA256

    b5f77605f3372b9bd1ca3b696c82b1c099fa3c7866dd392f9c4e5ed48dd5e5c8

  • SHA512

    abd042ddcd28922dbb4929d654458d9b8bf6b8743a76c834a1d155dc910092cea2befb6ee37e73d723da4ff2b1ba096d11b6d52138df4ba2b0c6e71a9598d69d

  • SSDEEP

    12288:knsIcbXp6mxTx1H4yhMbBgOMU5ouiDaFSwNZi+s4fw:knscoyyhMbBgOrhiJSTfw

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2