Extracted

• • Target
    2026-08-09_f8a4cdb0f25d081a000491a70f7bb0fa_elex_smoke-loader_wannacry_wapomi
  • Size 1.5MB
  • SHA256 1578d19544d444055fb6806c6b317268bfe30a8b952f86afde5a7b34dac880b8
  • MD5 f8a4cdb0f25d081a000491a70f7bb0fa
  • SHA1 49398ed062bb6c9c5b988762957f996a047eea60
  • SHA512 dc87dfb84d6113e624e99df0444876cd867a9159e2daecfb86b1cbc67aa0cdb70d731ade9d58012a5b961dffb302969e2e7aa486163e29bf1ca555bc2427067e
  • SSDEEP 24576:/LGRUzCKx8X1N59y2i1mvpA03XumWdNlTlvz:/eUOKeX1Na2i1i3XqZb
  • TLSH
    T1C575F1429A7A59E0C818CD30019634F557FF2C533507AE97F35ABF1F28BAED0A94E612
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoorcredential_accessdiscoveryexecutionbdaejecpersistenceransomwarespywarestealer

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Grants admin privileges

    Uses net.exe to modify the user's privileges.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Credentials from Password Stores: Windows Credential Manager

    Suspicious access to Credentials History.

    credential_accessstealer

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery

    Attempt to gather information on host's network.

    discovery

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Discovers running processes

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2