Extracted

• • Target

    2025-01-22_68e0902a53e92396a0240a62c819c330_smoke-loader_wapomi

  • Size

    36KB

  • MD5

    68e0902a53e92396a0240a62c819c330

  • SHA1

    9c0ee21e45103b5082642863854b542d506cd88f

  • SHA256

    cccb32a17fc175928c98ed3f3fc9ae958557bde7a224da5f5436a83c6d07d7ab

  • SHA512

    6573b174ee7a84b9425dc0da2c87a65957d84e76bb4ad09ad1fa19f96ae521e414205aec526ac355ecb83a295b5b0788c00111511d3136d2eff8a34f3d538cb4

  • SSDEEP

    768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n5b2QGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n5btGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2