Extracted

• • Target

    2025-01-31_4d37381b13904f93f2f932cf1d2422fb_smoke-loader_wapomi

  • Size

    208KB

  • MD5

    4d37381b13904f93f2f932cf1d2422fb

  • SHA1

    4b8e90748351e2b7453e607d9511559172cd5576

  • SHA256

    5345e0a311537cbc92670e86d5df3b92ca60662ee1da2cd2561fff8fdf66de1e

  • SHA512

    06b97f5fff2bbea1cc5b260defd020d9a2f466bdac2a458653d6a83408a078a5173d9302deb59bd99954b9539188b2eff39602a2f23682e338d38fb3bf958cdd

  • SSDEEP

    3072:7Jw8KYg5zA5GsMYSxSJiN/vGss9kTBf9pAXAtPOYQwOGCH:7035iMhL/vGsbTBl2wOsn

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2