Extracted

• • Target

    2025-02-02_0bbf6ed8da3f1d86db0e52e5e7c5726f_smoke-loader_wapomi

  • Size

    102KB

  • MD5

    0bbf6ed8da3f1d86db0e52e5e7c5726f

  • SHA1

    12e3af09c1834edf3e0bc57191da6976df4c9d7d

  • SHA256

    cf47ce6425965f667e763b0648562decb65bf006a51f6e7e3a432fcf7ac003f7

  • SHA512

    94adb6525535fee38da0dd734f8dc5ca3571af410b6d52dd21a5dab7b0ed85eae5a580d9b40d40084b698979de914093cc52467bde2c25d0c1c13c1c5bf2c8a4

  • SSDEEP

    1536:J7DP8r3DjxM7ODAlC8tiTYGUGZs0t2Y1GKbG0MBMqokd2YiGCq2iW7z:ty3/rDt8tWBZnt2YvRMBAkd2LGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2