Extracted

• • Target

    2025-02-02_2331079f0bfa0525f70d2d5d9e76165f_smoke-loader_wapomi

  • Size

    1.1MB

  • MD5

    2331079f0bfa0525f70d2d5d9e76165f

  • SHA1

    52e2f14542b57665168b2280e8bd30244f9676fc

  • SHA256

    eef5305d427c9030db4cdf6c118b27a95df3d88c1132ef168988ee2ab8502556

  • SHA512

    0a6512f770f1cb0902676557b6fc82964ff58d63a9f26a988ef897954e987bbe3b134739be3ae85eaecc1cf986da37f658ef624a74dfc410ade6d2cea3de0762

  • SSDEEP

    24576:c/i1PKzPeLS7Q7FDGiA0pn3OTPjQb2N4VVzoK93VKrE7O3iaURu90/:mbSdJU0pn3OTPjQb2N4rzVVKYaUR80/

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2