Extracted

• • Target

    2025-02-02_240a9ee7cdbab77a91c67f371c6ba141_smoke-loader_wapomi

  • Size

    2.7MB

  • MD5

    240a9ee7cdbab77a91c67f371c6ba141

  • SHA1

    2631d1ebc245f3e82189ac301bddffecf425f9fa

  • SHA256

    b7e7f159d2764c8882c5105ee00ef1eda2da921cc98a39e8ec85c6edfdbdc902

  • SHA512

    8d8bc0ac1e7b0746c5d80e2e762f9b6bab429368dc3cb7413381d0c3ff4eb672106c35aeb961a8d94cfd965b62ad5b647db515fd9d020800681b189095129e1d

  • SSDEEP

    49152:X4R58S5N0HB/bbICMmT5txA4BbFldYnJTSoFqpx0O9XLQG+p0ImszXiWA06Ygzes:X4R58S5N0HB/bbICMmT5txA4BbFldYns

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2