Extracted

• • Target
    2026-05-27_ae60e3498ab85c35e1e20349f2297d97_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 31KB
  • SHA256 eb34f3217a7767f4c51a23ca287827afd6b0e1b6e0050c79a6c82ba39fc01470
  • MD5 ae60e3498ab85c35e1e20349f2297d97
  • SHA1 25778546f5879adb46c0a4edc614880061211d52
  • SHA512 eee2bb5133fe739e8e5d5cbdeaf929f8add95b4db86e98e5fb6ae4798e42f6ebddaebfe120d8a2e1a6cb07cd07c8e2a32b3b942af7d46ca660f121925c7b5171
  • SSDEEP 768:uWQ3655Kv1X/qY1MSdUDQGPL4vzZq2o9W7GsxBbPr:uHqaNrFdUUGCq2iW7z
  • TLSH
    T13DE28E53CF9054F6F7EF253160FA3A478AB7AD2049A4EE5F83707A9D0C34600E862257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2