Extracted

• • Target

    2025-03-21_59add19371a6b1d9d2b02ffa823bd455_smoke-loader_wapomi

  • Size

    42KB

  • MD5

    59add19371a6b1d9d2b02ffa823bd455

  • SHA1

    3e376c829ec69826ad961cb7bbc4009b2e03e214

  • SHA256

    007e6c48f15655afc5bf3f6e35cae3d93f4ea427c0f3d2f03fe539d8df2aebd1

  • SHA512

    0566b18b1458c81758e846b8f80369fa9f9bf0ec0607524b4ac3b7f8c8fe6d3300c7cb25cb19c667bf686aa712a235641c4ee725695ad8d0a8a62a8742d1e940

  • SSDEEP

    768:5ofFhw9NkRKFqIA4Q0ndmMI15glZBf3D2QGPL4vzZq2o9W7GsxBbPr:WaKK3mM45ghfpGCq2iW7z

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2