Extracted

• • Target
    2026-08-03_2b644e1e9f06bca08d17e5a69db5b5d7_elex_smoke-loader_wapomi
  • Size 149KB
  • SHA256 3a7c8c843a365b2882e33e1306aa05ade44bc7d4c1edcf06cb0b3a691bed229a
  • MD5 2b644e1e9f06bca08d17e5a69db5b5d7
  • SHA1 fa497dfed59b3dd88b4905551f0c9539d3ade6e9
  • SHA512 ab51a2fce7b3e34ffff5d0087b5fa4fb257f10618b41c05265b9bed2cf1da349b33df23e3263fd18da37ce05be1ed798d2a7adc6d42bdb9a2b299b064dd9ce41
  • SSDEEP 3072:yK72I5+4vkRsWjfzc+A/5E2l3IyO0XUJDtq78ACd0i8El0GCH:P724nWrzc+3K3BuDtJlJ
  • TLSH
    T192E38C27E101D176D01700B12385DFB16622F632941698B7B2D8DE7E3B31AD2EB9876F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2