Extracted

• • Target
    2026-08-03_db7c0f1a87d0065b5b1518c438497eb1_elex_smoke-loader_wapomi
  • Size 923KB
  • SHA256 9edb9bed29321ab7b2a04b48816a8f50376da83b2e7dee754f8e55849d51815c
  • MD5 db7c0f1a87d0065b5b1518c438497eb1
  • SHA1 bc473086bcf410d1a742ec2da3f668615146033c
  • SHA512 c77fa3f436e775ca0761f0aee7cd7bea94bdbee3b21ca0f2be991ce6f6143a75a73d6ebfd6ab3bacb38c8c5794592988245379ebe2778dcf7a0812f9bcd0cf09
  • SSDEEP 24576:f9fIaKztUiut9H09KpGx3t0YJs0U4Wqrbhox9pATrV:fVIrSlj4KpA3t0YJs0U4Y9pAT
  • TLSH
    T149155B0ADA5790B7CC270271464BF2AF55629631A421DC8FFACC1E58DF72EE2121E793
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2