Extracted

• • Target

    2025-01-21_1fb60f730b16713971c33275fbbdac64_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    1fb60f730b16713971c33275fbbdac64

  • SHA1

    e960f810d5728eaa7d395a2b619c22e766fde92a

  • SHA256

    ed36bb930767c675721dbf70c59c74f4ac71d41dfefcfa464d85ae11b38d081b

  • SHA512

    b986144c4f34f03fc2b3bfdfeb772472fa68dfd5a18fa67aa30c45274588fdd970df8719226c5758028d8758dc756cc262254cbea62333150ead881ef2911baf

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQPqGCq2iW7z:Hk3U8kTQCGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2