Extracted

• • Target

    2025-03-21_eb55c7370d2385acc8900a98d162e3dc_smoke-loader_wapomi

  • Size

    42KB

  • MD5

    eb55c7370d2385acc8900a98d162e3dc

  • SHA1

    a71d03108f3c2175666a0b5b240bac574cbc3de7

  • SHA256

    38f9fd9e3fd8ec873d9c7aaad8cc7ad17c63c5c513c2023a10799be3ca5ea92a

  • SHA512

    7da63ba10f0bbb215f0bf5a0855a36e58a6ea24b04dd28bade08b9627f9b376201004030d3debd57867d1107c674d28763ac8f09c20cfeb8808958c9b7204629

  • SSDEEP

    768:5ofFhw9NkRKFqIA4Q0ndmMI15glZBfD5qQGPL4vzZq2o9W7GsxBbPr:WaKK3mM45ghb5JGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2