Extracted

• • Target

    2025-02-02_1dfbc1bc4b4b6bfe57f5aaf82466354b_smoke-loader_wapomi

  • Size

    779KB

  • MD5

    1dfbc1bc4b4b6bfe57f5aaf82466354b

  • SHA1

    2d7db55a4741cfc710e4f3b2ee23dbc1604ba3c2

  • SHA256

    e2934714e4c055e8378b6e35fcbcb3594643af811a5ccb2a68ca8394072a3c1a

  • SHA512

    9feb9144ff6336de57810bcab4c1722012548a2f006109182409891511a1cf4142f3300388eb458a2e7fe36642a604b9d3447ed978063f2164069f53dc1f760b

  • SSDEEP

    12288:QRYPGFJKTXO/7X8zoJrobeJqUgUeXBZRKnCq5mZL0cac:P+eTX+73ro6JjgUexZRcCpLF

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2