Extracted

• • Target
    2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi
  • Size 45KB
  • SHA256 9332ad96b2cd0c6b97aa78b32efc1d426e8c15f5350b626e6607c60fa018f1de
  • MD5 2d53d63fe087b27f4fe0e2116bf4addf
  • SHA1 166aa79f666d5cb3e50cdaa2e34d72e2d53025be
  • SHA512 596bcfa2b3c88fb2b52704bda7d7633ac50cdcbd8c8f7f9cce63c5747911f4828745cba8e3a4b62644472f15a002d8f1e58b586da590d827c4fb36d3d7660156
  • SSDEEP 768:krKwOi0dzM061VDuyEE6ZkRFBWQGPL4vzZq2o9W7GsxBbPr:kr4i0hMHD8P+PNGCq2iW7z
  • TLSH
    T111234A5197E44539F0F72A3076B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecadwarepersistencespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2