Extracted

• • Target

    2025-03-25_153295259a4fc3ffe176db2b2945df24_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    153295259a4fc3ffe176db2b2945df24

  • SHA1

    1470c1c66c7bf104abbe0b6f525413de155e5cc6

  • SHA256

    b4bb9029c2c5bb5bd35f5c48b55970bbcabafcb9f74375a3cbc77bcd07dac4bb

  • SHA512

    972ac1baca963a88a07c305d56de6657a1c5b34f06d942057cbb4b410d6967e2ffe1daa4938b68a524c4b52d20ac2455cb7921a868ed176af29be8f05848bce1

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZkEGCq2iW7z:fhAWJGSCTBf12ZJGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2