Extracted

• • Target
    2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi
  • Size 260KB
  • SHA256 a7cb81a1f26d92520bed14d44b50e2d4be84eb8f79c8e5b01cd2c125e9787b3a
  • MD5 74807b381e0df990bebaed66426cb809
  • SHA1 4cc638a53d30a67f02a77c7b946fdef950e466c2
  • SHA512 44ff2fedd105804e447ef74ddb7828487d9a3c022782b03e9cedf0a5147ac9af76fa4bbcfa77bd2d4817d3fb295b30de9c3a356e0337bd0594c0c4709dc72e8f
  • SSDEEP 6144:T0h3aTaNsfI+gn8MUL/LykkROI7N4hHvom:2MWsfI/lU/kvMvo
  • TLSH
    T1494449327A84D97BD881137664FC77A91D98E0A52F1C03C3E2DC4E699E57AF20634277
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecadwarepersistenceransomwarespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2