Extracted

• • Target
    2026-07-06_078959076eefb7dfbde7484bddddd454_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 30KB
  • SHA256 791e508d73a12c2cf0de4aea102823f2ffe2dd0ca54ce4dbceaf6d3a54d36407
  • MD5 078959076eefb7dfbde7484bddddd454
  • SHA1 a5e19f981770daeede3025004bbdcceada2cde29
  • SHA512 7d6947ec7b6e864cb0cb6bfdb2501e2cb21ceb59a408b6874a5f8c5d9e18283a4ea4d53f1fb79f48a8743c9b076c28c950a8ac09b28287ce6a88fa9ff150c2c0
  • SSDEEP 768:WA/qm68Mnau/XqKaZQGPL4vzZq2o9W7GsxBbPr:5bQyKaOGCq2iW7z
  • TLSH
    T17CE28F52CBD044F6E7EB153174F63A478A77AD3048E4AE5F42B0BADE1C34A10E962257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecadwarepersistencespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2