Extracted

• • Target

    2025-02-01_a12432e75d88a5c1534d978f85524377_smoke-loader_wapomi

  • Size

    581KB

  • MD5

    a12432e75d88a5c1534d978f85524377

  • SHA1

    d9ca09da728b378d4ed14709fe0207e3ab9a21b0

  • SHA256

    6405fff0f38e854fb479ee512c7f005a6edf7c798dfb27d033e97b23bf099db7

  • SHA512

    0c17e3bcecee59259c59bbb024c200542c1d1bdae367cfbc3b8541e0a21d67d38e086591296a0cb80e2423a761ce012c0340b9ae2c887f563570abe8464b2eb6

  • SSDEEP

    12288:FkCkUf7WV/HGlI9O+FPnPfFfqfyJasMRiABSm8ay4HL+0NQLfn/Cq3G/Pv5:eCkUaOMn0OlMMdcHsTn/Bu5

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2