Extracted

• • Target

    2025-02-24_456adfa0d7854cbee2d53a9310c9b78b_smoke-loader_wapomi

  • Size

    56KB

  • MD5

    456adfa0d7854cbee2d53a9310c9b78b

  • SHA1

    8a73ff921b51c1c68bb7f983d09d625600d015bc

  • SHA256

    01bb1272e5c5eff763fb415e433763770ed6ef9f7393a9e1434fbcd6344c604a

  • SHA512

    30604971a9a77853aa7eabb6c7bd91d22ed9567e34f29bc1bbe603f2210217c47aa2920c6a492e2b8f7922421f2b944d94e6513329018dfca2509ee9e2423ccc

  • SSDEEP

    768:Q1BwfldXOO6FvGg+ehTO0MOm789yWVecBWieV1av3o3CGkUpoWQGPL4vzZq2o9W7:Q3hTrmg9xVjEvav3ohoNGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2