Extracted

• • Target
    2026-04-19_76d7f2bae0529608ec567adab197db6b_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 31KB
  • SHA256 be52c7d7e6bd402de3269445f2845163e5e5cf1da131105cbe5b36a94479c206
  • MD5 76d7f2bae0529608ec567adab197db6b
  • SHA1 bfd3fce101785b221304eea108a9216d7a4f3796
  • SHA512 7a136e704fb104028500b70c74f502a4b65076e01ea98d0452c9c2dd0dd43dec7c3d0d8dd73b79a33534b43730808143d12ca16c7c2011f4c66a35cd761c5090
  • SSDEEP 768:uWQ3655Kv1X/qY1MSdWVQGPL4vzZq2o9W7GsxBbPr:uHqaNrFdWSGCq2iW7z
  • TLSH
    T185E28E53CF9054F6F7EF253160FA3A478AB7AD2089A4EE5F83707A9D0C34600E862257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2