Extracted

• • Target
    2026-08-08_18eba44b213f589007060677990f8d05_elex_smoke-loader_wapomi
  • Size 69KB
  • SHA256 e2615354d4a75cde9fd74cde007fc2c9d867682a2e2c9296ab4486cf90f5cdeb
  • MD5 18eba44b213f589007060677990f8d05
  • SHA1 5da41cdcd41c1ca6258ed0732bf723ff8167d7eb
  • SHA512 cf859ceb005b22bfe2c83931fc254e06d4441a8fc335e37b60f404abc91f17f523d6e01d8f57cf2f2799a97747a9773fbe3eafdfdf9e5a6530766f5882b701c1
  • SSDEEP 1536:XlAODY1bHPhXzlybFCR6enZ1RqZGCq2iW7z:XVDbSzgGCH
  • TLSH
    T16C636D137A1E8471D98062F02835BBEB83BBAD310F6562D7B7C49E7B0A602D17D72917
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2