Extracted

• • Target
    2026-08-05_fe63d295583c5b45b616d7729be6e0cd_elex_smoke-loader_wannacry_wapomi
  • Size 343KB
  • SHA256 fedc339a57c10b0b49199d8473d032478961355d48f05012f8e5983c6d99bef0
  • MD5 fe63d295583c5b45b616d7729be6e0cd
  • SHA1 f699dca8161ea5e2fdd3a8b0ea1b780525d61bac
  • SHA512 eda446f8016b5c7563bf27d13116afa14ffeab19c70247da46ad5dd99f30bc651997f4573827b4d0edb877d57fb6ffad0cd3e48916e780a2eef9ad06fb768238
  • SSDEEP 6144:z2UIpMSUmfA9Bi0tyA6S28rlA3s1r/Kqntq5:CUCztyBi0tyLp8rlA3s5/
  • TLSH
    T173747B127FF5C03AD6A30632CF595BE5A0FABA654D34494723C41E2CAB78D82D235F29
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2