Extracted

• • Target
    2026-08-12_bf909beb7cceb82723f40099490a5222_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 31KB
  • SHA256 5e95315ebeeacd8a831b66104b8679498fa93f105bc67cbfbe4b7d74654c00c6
  • MD5 bf909beb7cceb82723f40099490a5222
  • SHA1 e13b4c2e297d4ee6007631469748ca530f43d46a
  • SHA512 3572a6b69e9752b59bff3a19b1b59a4291a61d9da6c5ed507c74ba4e6ef264766d2a3c627b08b3baffbdc0740b88c3046c5ab41d9fa8968e8eff9153034bf92a
  • SSDEEP 768:6WQ3655Kv1KjqY1MNHnzQGPL4vzZq2o9W7GsxBbPr:6HqaN6qHnkGCq2iW7z
  • TLSH
    T1F4E28D53CF9054F6E7EF253160FA3A478AB7AD2089A4EE5F83707A9D1C34600E866257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2