Extracted

• • Target
    2026-08-09_e5787588549bb3a6379d2d5f0576eacd_elex_smoke-loader_wannacry_wapomi
  • Size 108KB
  • SHA256 3a6cfcc3580cc73183c1b1deca6ca2a60a921fcf5a3d9b38d06632856123b51b
  • MD5 e5787588549bb3a6379d2d5f0576eacd
  • SHA1 c067ea1b106fd297b791ce0fe101b064c49d0445
  • SHA512 ff5d2fa28e0853a34ada6a2b74f8a7835c7be3893bae5d1f5ca8ba519cf5367801c0b98f285f99d7855e50a052fabc4710bcd1b38d2e4e0354616ac93d641af6
  • SSDEEP 3072:PhiXByLg5R+MHZ9LflSx5D8Tny9wcGCH:AEg5cuZ1lSxh8ySh
  • TLSH
    T180B38E125AC084F2F98421BE22C35BB79636E665151296CBFF48CE771E322D196372CF
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2