Extracted

• • Target
    2026-07-29_aabe3a3dffbec72f9e8e22b17198f47c_amadey_elex_mafia_smoke-loader_wapomi
  • Size 310KB
  • SHA256 c2102709408788e026cc8942d8dc5d6f853296aca3470b7b183268c71401c25c
  • MD5 aabe3a3dffbec72f9e8e22b17198f47c
  • SHA1 0d32888bbdb269b4bed13c804d23d9a7edd74f83
  • SHA512 c4454fedc3b396c5106934c7df6fb8d58613bcdd3572f91766e6005f5ac987008ecc1e1d1ab6b88dc036659d201fbbe72ebe411e1553303f3513223092105fcf
  • SSDEEP 6144:AhItQUyP6Cwt4AFnUTH86BEUCqqSGQYZOq4onaBzFYvGO:AFP6Cwt0TH8uCPSGHZOq/naBza
  • TLSH
    T1ED649D1077D1D032D8A310748A6A8BAB8D7DA0622B6568C7B7DC0B7D5F603C2EB3574E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2