Extracted

• • Target
    2026-07-28_ea81dad56067a7c3f04917bbca262b29_elex_smoke-loader_wapomi
  • Size 70KB
  • SHA256 47c112e9dfead0918e8512d6c7e39c93a301b1ede8af2bd48aec19016ea98f19
  • MD5 ea81dad56067a7c3f04917bbca262b29
  • SHA1 3e5239e24ff11d3f6ae689786139fbb8690acbd0
  • SHA512 d1d8fcb648b961e52d1b4d725f607a8899113210146adac754fb28a543b504c1eaf1d8e1dbe5b933e2edb25e306c1066c2fd4ad56ae3268cfd5b3146129c93e8
  • SSDEEP 768:LqNeoRF/aCHPcOlvzrWVlXn0T4T9jlxsN/eMAQGPL4vzZq2o9W7GsxBbPr:B8HPcOlvOVF0T4lENmMLGCq2iW7z
  • TLSH
    T144635B07BE998472D1B203B059757BBAD67BF9399B3043CFA3445D1E99202D0EC35B2A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2