Extracted

• • Target

    2025-03-23_bbc1403f2372aaf11e6c537bc519595a_amadey_smoke-loader_wapomi

  • Size

    332KB

  • MD5

    bbc1403f2372aaf11e6c537bc519595a

  • SHA1

    9b10996a51240c2efe1f4533f25b0a642078a1bc

  • SHA256

    d1922effe4a9dc6682b19cee453e406b4552536ccdd3919316fab57b21e49bae

  • SHA512

    c311a6eebb21c4d10671de83522d9f4a4af3c2ee6c6d76934c504c90e67b344c4ca5235fa6620b4fa90a467274ca2c425488180777ad741c1f2f64eba50957f6

  • SSDEEP

    6144:bcLYfNP/QZmz33CuOgaYpHHb234vVbgOOUWEPu:79r3CuOgaY9HiovVbgOUEP

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2