Extracted

• • Target

    2025-01-24_1740e64ebb1afb1af335ae7bbcd4d8e9_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    1740e64ebb1afb1af335ae7bbcd4d8e9

  • SHA1

    8400cacafe2e1165e2960e5afb49b51f4cef0b32

  • SHA256

    b4cdb504d14c40c80fa50cf91d0a31fc8704c6b3b3094787f6212de68f825e17

  • SHA512

    350700d9c589e9d6797e5d3293446489dc461aec009e8586ec590ec1ce66110e25e868309640c2cc28f5e5376fce4d05364f1105270dfe8b45dfe2297630df8f

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQ7qGCq2iW7z:Hk3U8kTQmGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2