Extracted

• • Target
    2026-08-12_338416352909533a742e2ec913b522fd_elex_smoke-loader_trickbot_wapomi
  • Size 320KB
  • SHA256 ee3776e924657f16a8fc50663141eb7868daae433cbd18ded854d67876969093
  • MD5 338416352909533a742e2ec913b522fd
  • SHA1 52420b173500105b50b2c1b367e088989230df27
  • SHA512 829c02ba83c996362eb698512e7b0dd8a55f32ca8ef76e89886d97e7a2ccbfbc14ea251e6c1e918a78cbc76cbd57120a73539fba404ac4f3bb5b8229ea453047
  • SSDEEP 6144:ZQcaVpy1FeGkauToFZalhAK9tXqAuReydv4jXUWGPCZVSbXCVRYSKRZpkq1ZBjHd:KlpyfeGkbTmLK9QY5jkrP40bXCJKzD
  • TLSH
    T16E64BF447D50D0B4C89240B602AEBF76FE781AF50426A5C3DB94E9A12E742A2FF3735D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2