Extracted

• • Target

    2025-02-01_6627f88e7ea7adbf292757aabc418681_smoke-loader_wapomi

  • Size

    332KB

  • MD5

    6627f88e7ea7adbf292757aabc418681

  • SHA1

    e69f1146dc9089455cf7260ee6e9095fb4a7e3b5

  • SHA256

    1ce4a126bdc68bec5a0bff58c1e5c4fc2526b2aa4a1072adc7840e1e32180e22

  • SHA512

    b6069508b266032650ba407dad0e21b75e8079ee6217d0dc46c79a6cda1f8be1331c17073d5539eae33d7f028fd5ef11b1e7b93b26ce3d47e606527d1492616b

  • SSDEEP

    6144:I1LtGgwWxdrGgw7RQelt5DVb2jqyOBKXovhb7/89EPE:UJNe7RQeltZVijGBKyaEP

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2