Extracted

• • Target

    2025-02-02_78337657eac61bf31cfabf55a31842c5_smoke-loader_wapomi

  • Size

    230KB

  • MD5

    78337657eac61bf31cfabf55a31842c5

  • SHA1

    c4df3b4b18870b96b79c16416ac85925d84bc4ce

  • SHA256

    6c34db1a77fd8fa50fe564dd58a19c84667effb032980128b172bc60aa8701dc

  • SHA512

    8c216e92e9d61aa6abf186687de9ee076ded0ecdf1b10fc5fbdee0c05a80794d884b585802698c032d29e1cf5fcbb81476375bc1f7d31157bdce9cbf9394d015

  • SSDEEP

    6144:aeB/6F8/8+KGf+oUVBDyM3cLpXVYYCimgpPmfgN+5:aeB/WK+bBmJpXqX+BN+

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2