Extracted

• • Target
    2026-08-05_572f6cbdbe041551c6a69ef01f3a034c_elex_smoke-loader_wapomi
  • Size 80KB
  • SHA256 04d70cf7808e4638254809e3ac22f18f6ed8e389897bc84e1418cd0121015c6b
  • MD5 572f6cbdbe041551c6a69ef01f3a034c
  • SHA1 2e98e91fc26804f8e17ee4405a96520551b0bb7d
  • SHA512 056a2f966ea1b7a6a23ed677e0f51eaebaba8486fe8f418ae2c9f12ec704aeabf5be68621c77a9cc8faa28285f7ca1778c9adb0ff917e4e6924ca6e2e413315c
  • SSDEEP 1536:1HnwKPM3BZJWiqCPlNn9uaKHq/UUQg84IfssYg84IJAksgMgA2P8sUHIc8m6ssYb:1y3AaKHqshGCH
  • TLSH
    T13283E723D6489157ED401AF3192923690A27E871E092DCCBB3D5A958193EAD3FEF4327
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2