Extracted

• • Target

    2025-02-02_99057baf624c7547ae3176cd0b61a736_smoke-loader_wapomi

  • Size

    60KB

  • MD5

    99057baf624c7547ae3176cd0b61a736

  • SHA1

    3c5dc36b7b8b8504927270ee5a4ef05ed323c887

  • SHA256

    6468f753d87d7b396bcd0f9fcc1615b0dc72c02f16fac4d6fb96d01677956f88

  • SHA512

    659ddf63feff5e9bb3575f6b3e5beeee02ab820cf7087d1bf3b0337dc70b3fd9066b2b0cdbf1ba1a1fa2cf941b1789c4090f3a53d5eee965e5352e7eb722b2dd

  • SSDEEP

    1536:N1cLoeEGIfdTpu8ttB9vsIBwWZHJzMGCq2iW7z:LeEtpxR9kW5JoGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2