Extracted

• • Target
    2026-08-03_5338b997cda2e9a8aff2fbd4684bb0b2_elex_smoke-loader_wapomi
  • Size 652KB
  • SHA256 785c63f5a18790f695e63320cde33b438fae044d51abe27aa77a53eb15031719
  • MD5 5338b997cda2e9a8aff2fbd4684bb0b2
  • SHA1 d7eb8ca7eb538d5dce83e4be34c8aa9b0001978f
  • SHA512 175c7b9d93089f4a320dc1fb360637b85aebc7ad3ec34c5d01eab92be2b3267976c7cde4c3f42c673efbc2d13c71b906d2917410125c2a424b9d988626e1aaed
  • SSDEEP 12288:4nV9FEgYAgVTeKHufLneR0vQuUAljQmZ:8fYhKfLeKUCj/
  • TLSH
    T130E41B25D303D0B9CE1702F3458BF9CAA628B9155021196FF38C6E64FBBB93179B6346
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2