Extracted

• • Target
    2026-08-09_a19ce9f488a032ec23c902e8ba070dc0_elex_smoke-loader_wapomi
  • Size 28KB
  • SHA256 e4d742b4eb95adbef3c81ed9727a1556a1f1051cecd410137ad41d4fa110e00a
  • MD5 a19ce9f488a032ec23c902e8ba070dc0
  • SHA1 393e1e302bc6b90f5d8f6c0cadd7bb26d188b731
  • SHA512 57be67e47caf9c23331ba7f3483e41283597443eeba1a30f2d16ae9556d37acafc9aa6d6e936f852336f0cec5cb1480ec84dde6e19042cf526be21dfbffb13e0
  • SSDEEP 768:NqPc+CdkE7a80QGPL4vzZq2o9W7GsxBbPr:0HCdksnGCq2iW7z
  • TLSH
    T179D2AF83DFC05CF7CA9D22334033626BC7BBA93147B69A5767D184261D75A44EC2A0AE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2