Extracted

• • Target
    2026-08-02_77d880f03283ac71286cd152f86c6334_elex_smoke-loader_wapomi
  • Size 15.0MB
  • SHA256 f3169d6320a777227231d9cb680575ee51c66f835acd0e6720c5b136ce1b5302
  • MD5 77d880f03283ac71286cd152f86c6334
  • SHA1 6d9b6cc1909372006e2f1bf22349020a58f0ae29
  • SHA512 9fa9754d1a68919f9ea6a630f2710ce5951339b94d48a227397232621634d7ac913f55bbb62555822e93cb2feae7646c7b3dd34e028000403e50db2fb33e2b40
  • SSDEEP 393216:ydcXZz1OyowSyca66kvGjo+58EZumN/jrcWXmZIZAHcWQe5+hh9AbS:nXyvImoow1ZumVjr7wIZAVP+VAbS
  • TLSH
    T181F6335AA030C016D65A70FE71897BCE7E9CFF51A464684A403679FD2637803EC9B1AF
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2