Extracted

• • Target

    2025-02-17_4999eb1c95e1dc5148da873983f65532_smoke-loader_wapomi

  • Size

    5.1MB

  • MD5

    4999eb1c95e1dc5148da873983f65532

  • SHA1

    a63ed0be542f8fe5d7052576aceee63b20274adf

  • SHA256

    7fa9e421428a672f31a7eddcd2085607b5223d71c5ea05a1e3715099f781f7ce

  • SHA512

    7c7b0f42b9920641aca5a3f5c4f93e29f200f204eca6f2e292cff306800bde3ea5dd61441c2892d7be4de5930bcc81ce05bb99dc2dc1ac9407e663aab8c06d65

  • SSDEEP

    98304:tEJjByItNtx34RMUP7I5dHWSDa+5UPGEpJLfiVBAUZLEAvfzXpQh:eMvSUDIzHWSDa+5UPGEpJmVV5A

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2