Extracted

• • Target

    2025-01-22_cd4de5071219ab738d2e99f38b6a51fe_smoke-loader_wapomi

  • Size

    36KB

  • MD5

    cd4de5071219ab738d2e99f38b6a51fe

  • SHA1

    061f86a2842deab17dd6a3a72e3c86e0ee4db727

  • SHA256

    b2f8cdc583de0550643191b494af87f97e26947e673d4b8d43d12bebe5013313

  • SHA512

    4e915636ea29bd363a57ef5233e152a46a055921b33378e5427a88041aea07be6fbe0601b32604448dd09c48e08c4dd7aa82c1813d7ee63d31b90f1d1281db9f

  • SSDEEP

    768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n5+uQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n5+VGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2