Extracted

• • Target
    2026-08-12_97559b11c29d80c125be115064c2dbd1_elex_smoke-loader_wapomi
  • Size 92KB
  • SHA256 98f3a3c8e2c2bea20c9ec95ba2ba7cfa565925a9d75634e2fbe7fa69b57b2044
  • MD5 97559b11c29d80c125be115064c2dbd1
  • SHA1 e5e9c8a628e1b7af4a4fe54935a0d946e6cbc589
  • SHA512 6af743635cb8901cfac0ccda082d608c27cfc4a22de8599f6814def9fe2aac8980bbcf2d1abe7d8dabcd2466126343600d8af992b6dd2cb2f170f40c09ab3a6e
  • SSDEEP 768:3HrhT5+KybRpnE8K74kca7NerB8iXpYmRRXvdi82BSOe9oKSJ2SLD0BEZWkA4LQD:T+KY04RMmSCYmBiF4O7WT4sGCq2iW7z
  • TLSH
    T1CC93FB0263E89619F1F33A3069B522310E7B7CA19E3CD68D0289915D5BF3E90DD74BA3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2