Extracted

• • Target

    2025-03-21_36c72da95191b93d09238f68fa3ef397_smoke-loader_wapomi

  • Size

    42KB

  • MD5

    36c72da95191b93d09238f68fa3ef397

  • SHA1

    79347d02e4899d2b22c14377d5c36204adcf8fe9

  • SHA256

    674e21a7d5c4a67bc55bdb1bb291d731e83f1f7bfe17a749dd88ea1243d0c202

  • SHA512

    614d2c9e4e59ae3b6e5cc771d55541eeac7b6a62e8fbb5dc51544860e6d2997b00a406c88dc471510fb7d82bf8e76393e06f8e88e5d5750a48e2fd6943555b60

  • SSDEEP

    768:5ofFhw9NkRKFqIA4Q0ndmMI15glZBfAhQGPL4vzZq2o9W7GsxBbPr:WaKK3mM45ghYGGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2