Extracted

• • Target

    2025-03-25_48999f767606219d4cbf2546d160f627_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    48999f767606219d4cbf2546d160f627

  • SHA1

    ec67775e7124b1735eb72b2008d4c2d98ca5004f

  • SHA256

    a1f403a3c9f54bdca4969c6c03c9b871ca79a18ad5391fb0ea56ec39aaf04df5

  • SHA512

    7d86d1c0cb749f82e0e3f9d248a0d4e7d07bee9cb3d219347d45515395a21af0a66b1922d9666e56c6b787d82183b678f0e0a2c20ac378332f6cd51c80131f6b

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZidGCq2iW7z:fhAWJGSCTBf12ZuGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2