Extracted

• • Target

    2025-02-02_62771d14dc6dfcbd4983c454c3998cd1_poet-rat_smoke-loader_wapomi

  • Size

    30.9MB

  • MD5

    62771d14dc6dfcbd4983c454c3998cd1

  • SHA1

    23b13ce96adc900ef8441a2abadec1576ec94982

  • SHA256

    634dfaebef979ac17688f6f220972d3ceef866942e5e8ffa780d6200d67552d8

  • SHA512

    00a7b361b8c84bbd4ccd239f9922172fead81acf5d8c243e914cde0e4bfc12cb03ff1f9a705f530dc7cef4bd6aa687f1c3026f5459c84fbf7f4352d712761c8b

  • SSDEEP

    786432:o/dNSejkY0L9F0VOiGNcm+oI9I+pKrbItN:idNSe10Lr0VOiGObD9I+of

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2