Extracted

• • Target

    2025-02-23_686c6b7f5fcaa0f260d51c4729ecb609_smoke-loader_wapomi

  • Size

    142KB

  • MD5

    686c6b7f5fcaa0f260d51c4729ecb609

  • SHA1

    f6e532bc8a34c63676f2d21a084e3ab32b92fb2e

  • SHA256

    50de9ffd64e6433f0b0c817a106582465b2e832bcb4b6077e781ac98749461c5

  • SHA512

    5b25e64ef353d46f0e3d914a29700155519f185900674791aa504e6f1656b015a48d33d935a286a220f0e35a26193a99b684bbec4c141033e0477109f035cacd

  • SSDEEP

    3072:NR0NFe5yVnoSmwgVSA5Y/0MTz3/vHorPkBJuDlPIGCH:NRL0IO/VTzIbMJuDlP1

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2