Extracted

• • Target
    2026-08-08_32aa9947d6c27ad4f59762a6271fcc4f_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 622KB
  • SHA256 381cfaa40f1976d3931beb5d89e7353f6c8656727d283a5c76f5ae38c0666034
  • MD5 32aa9947d6c27ad4f59762a6271fcc4f
  • SHA1 a8e401112633710010ab057bf4abcc2973456d86
  • SHA512 171632ff8489e7e7618713c4a6bbfd2574cd6b9fa7fe43fdabb1bffceb4c6596981ffbf857cabf826a4f176645ed4eff0ca56d57aa665add162bb97248ba18a1
  • SSDEEP 12288:+oFkNm70K636DaVhPXex1bs9MOoW3NtmAX/mpl:PFkNmq38acs9MadtlXepl
  • TLSH
    T186D45B563EFDC23BD3D15570CA6D7BA4B0FAB9684E32885723801A5C1A35D82D317A3E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2