Extracted

• • Target

    2025-04-07_a6d768091afd771a71020aa43e0a0d26_amadey_smoke-loader_wapomi

  • Size

    474KB

  • MD5

    a6d768091afd771a71020aa43e0a0d26

  • SHA1

    68fa5c6e4abc73ed28c4c088b066da78b3cc7289

  • SHA256

    3c9448445b0384a54ad64ff5b47b8529f1b930a22c23cb0d14e73ccd5c17b114

  • SHA512

    2c9872513ec855fe4ec88e218b7913893dde9428e7d5ce0814963b4da822bab0cbf1152cd24f9597bb9f074dfb4ed3f7c112045a415d63c200e48fd3e05ea552

  • SSDEEP

    12288:N0QsSmAKgxCk5IPYOVhJUInmB0kwKyI6t2CtOjpcoPa:N0CyjJUIw0kwK5hjpco

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1