Extracted

• • Target

    2025-02-03_fe92ccb3a6f9d06f24cadd44211525d2_smoke-loader_wapomi

  • Size

    24KB

  • MD5

    fe92ccb3a6f9d06f24cadd44211525d2

  • SHA1

    a392460b01e5a41bf26ac70261a55a82308d2d92

  • SHA256

    e13c94e813fd3da26f23f6029e6b46d607a0a465fc4f898f4893e927e7a8b205

  • SHA512

    fe45e6410730d20fb44bdd3719f300c77d2378c8c04c1289f8b001c3c75b42ebd0b04ff0c863d13d45a7067df78dc37f6a53bb47dd7a26bfcec7ddde507877c7

  • SSDEEP

    384:vVMEEDYM3MVAgrgBScXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9Pffr:vGE4YM32A4H8QGPL4vzZq2o9W7GsxBbz

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2