Extracted

• • Target
    2026-08-01_0f1131d999d0f1392f6c2ec407bf4c60_elex_smoke-loader_wapomi
  • Size 133KB
  • SHA256 f0bae2b9bb0d6df83c9a9798fdf8e075102dda1f21d34fe513974adeeca4e9ad
  • MD5 0f1131d999d0f1392f6c2ec407bf4c60
  • SHA1 0e5a54800a5567f1e0e3aae69ab580fa983f3888
  • SHA512 bb943d0ff3dd11493ac3d040854ac41f5602821077897c15544244ed6032dd3cd88afaf7242532e769373429d7a25bdd782bbc04980bd1a57bcd604522b8f36a
  • SSDEEP 3072:k914eR1Kj7y86TOFYpgV8R3LwDyNUzhL4tkAv2WiNc1GCH:k9BSrOpgV81LwDyNUzNAkm5if
  • TLSH
    T198D38D029BC042B5D4D770F1179CB7B1DABCD0BC832E29C7B69882F4A515ED08E76A97
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2