Extracted

• • Target
    2026-08-04_4d1813654c187a1aa52d40d08d5d40ce_elex_smoke-loader_wapomi
  • Size 2.9MB
  • SHA256 91cc8541446d6651d0fdc14ee38f0ff00bc2d759b0a14691dce629f350264772
  • MD5 4d1813654c187a1aa52d40d08d5d40ce
  • SHA1 1f5ee04a49fa6279431efa5b44e0700872d46e89
  • SHA512 a77300ed4db2cea66cbd2218639cb6c5290076dfb549da3dd9cb9df030d4ebdbb2471efed05a71d8e943020fb154668287f49533d515d5b801cb540e7e203b81
  • SSDEEP 49152:tXSByJyUlLzeWWJGL/bxoW8CvaJeKJjnEdQGgP+mpVOuPpfQvLUGTMdEldWmMCCX:t1l3e7M/Gy27ESHmmpVThfQvLUPdE2m
  • TLSH
    T185E533E78792D34DE70A74F642333E966D90DA600A12CFCD5B48261F1CB72CA6246F2D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordefense_evasiondiscoveryexecutionbdaejecspywaretrojanupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2