Extracted

• • Target

    2025-01-29_89ae4abf62fe2c287a00cacd6e1f5705_smoke-loader_wapomi

  • Size

    100KB

  • MD5

    89ae4abf62fe2c287a00cacd6e1f5705

  • SHA1

    242c8f7c0982c5bed808da1d10d37630a5edf938

  • SHA256

    e61685b1936377a0f46b05be441322acbe98ffe8b9876a1a28292196c16f7da9

  • SHA512

    23ed1a1596f5a47e7f80f15a820ff63a1907cc6fee86a220a8a995f49ff37bedc0ef67458f2188ed3d7c8f21a7d550257be7d9e908013055ab037cf1ef302fec

  • SSDEEP

    1536:v6+mVK4/qSMHccSRN8TebjhyULZaXkwh/sQP/icz8Z51+JyGCq2iW7z:v6RKE8T2hVLo6QCcz8Z51+gGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2