Extracted

• • Target

    2025-01-22_ff7e57e2e03a0adbfb0c4f258a7c593d_smoke-loader_wapomi

  • Size

    117KB

  • MD5

    ff7e57e2e03a0adbfb0c4f258a7c593d

  • SHA1

    5f9f4f7e977814ad9440509b60aeaa1fa04a2b5e

  • SHA256

    359759ba244aaeceb84d59f05c0954b8130c79d31f92ff1727e32d1ec7dad6ac

  • SHA512

    0b80f467a5ce6efc5d8fbe1f1153aa5d621dd4ffbe2ed95156e564cd8a56971246b17b962209d0789f704b5dde187d2600b71ecee9c3a9b7a1287c3581ee9bcb

  • SSDEEP

    3072:fiVTBTgQOX80I59VJ165J+S0YKx+wGCH:f2TgBX8j1S+S0YKxY

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2