Extracted

• • Target
    2026-07-28_a636571edcab2f1d4fd71353d3b3f37d_elex_smoke-loader_wapomi
  • Size 130KB
  • SHA256 28e498ffc1e447abaadbd26ef64c264f47ee2bb320174073d0e13f36fc34f3f3
  • MD5 a636571edcab2f1d4fd71353d3b3f37d
  • SHA1 615c32d4f76be26f9a2d59abde51ab59fe1d65a3
  • SHA512 d20c4215eee8d4c1186822f3c3a467632e82d30052b9bfb94dfc50f4cb881813a1287709acc154688d035134d334a2881f78e2246fd90a53b07b1c16053787dd
  • SSDEEP 768:r9CjFpDmmvV6Xv7SvC3UTe6oDUFHQGPL4vzZq2o9W7GsxBbPr:JYDhI/7SvYUT7wGCq2iW7z
  • TLSH
    T102D369A3965888A7DD69113010C7D3F2FBA7EC12D66F852F43D79C03FA87E642E19281
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2