Extracted

• • Target
    2026-07-29_466efb49a69afa35dca0eda8af00dbac_elex_smoke-loader_wapomi
  • Size 64KB
  • SHA256 d1f4ed7ca64dc14c493d99fe48fe255157886b4c28ce6d7ed5ab86e18ffac71a
  • MD5 466efb49a69afa35dca0eda8af00dbac
  • SHA1 ec4800b314557dc652d2932d3dedbdefb44d58cf
  • SHA512 7400f26385b19d30c40f18b782774f95e427652cdfce4d8351187f0f9871afdf3f6358c1b01547266f8e05eb0c7a8ca8e830e2ede2b068867fbd82289a0b374e
  • SSDEEP 768:YgoxKForThXdJjuvEwrlhpwx6E4eKAK7r81QGPL4vzZq2o9W7GsxBbPr:BlFopNJSvu6E475MyGCq2iW7z
  • TLSH
    T194537D53AF4064B3CCC514B292F52F874EBF45A057594CDB22E89CE90A98AD36D3B34B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2