Extracted

• • Target
    2026-08-02_53980693d44162e4808a76c324c2d586_amadey_elex_smoke-loader_wapomi
  • Size 303KB
  • SHA256 2c0bd6032060a9e07e98b351296324a0b54f2f4c537d2e55ec808d9b482912f9
  • MD5 53980693d44162e4808a76c324c2d586
  • SHA1 52a188a13ba1b3c4b5fa36194a2b2be414460dfc
  • SHA512 342b79c6811773559969f8e91b4fc8d89bae459621e84b13e1fd1b262a6942fd726e73b46d464a92d931cb1a45fa1497e1fc122ea1d4a62de0628e2b13d5e144
  • SSDEEP 6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLa:RdZc0lp4PzanGQ3fAC2Mo
  • TLSH
    T1AB646B127FF4C03BD64302329F5D5B95A0FA93A90D31498327C40E6CEA759D6E36AE2D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2