Extracted

• • Target
    2026-07-05_290482efb4a527a2972225f27712eea9_elex_smoke-loader_wapomi
  • Size 313KB
  • SHA256 e23cd0d2ad351652ae38ad4e3138aa1c020654345c2013598ce070a540a407b1
  • MD5 290482efb4a527a2972225f27712eea9
  • SHA1 f9cb46c9ff06d657417de7c85a92b7c4f6d1265a
  • SHA512 b16084d524455a7e00541e49f07a918e440c60b78dce123182fbd163960c12df0248912c4b40deed43b492aeb84b4c63beda70093bf2f1d0bdaeb5b3fd7a790f
  • SSDEEP 6144:kqV54oUeSsMY3j0cI8rdYEylF2EHJ8Sj6vzHrh8wDVU3wMs9ZFWb:kqV5dU7oTWKYEEF5J87vzLh8aVJS
  • TLSH
    T1F16423B95A9244D6CC0BACF11F136F9C7B70DA11214CBB5BEAC2D94F5C37C02AC68616
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecupxadwarepersistenceransomwarespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2