Extracted

• • Target
    2026-08-13_0d4287a5112c0c8417f460f4bbeacc3b_elex_smoke-loader_wapomi
  • Size 92KB
  • SHA256 a065e3925b2d900db350cef5a4ab97877c9d0a8aeef758d8b53e4ad0d436729d
  • MD5 0d4287a5112c0c8417f460f4bbeacc3b
  • SHA1 6cde997238202158fc75bb09d22f1e326fc90875
  • SHA512 3b27cee7895ec230eca26ea8e0920209b139ecc83dcbaf902167041ecf8747691cc3bace718f3b00a141c34a75d00de74946b84fbec9c0ed8a1bba9b21bdd76a
  • SSDEEP 768:3HrhT5+KybRpnE8K74kca7NerB8iXpYmRRXvdi82BSOe9oKSJ2SLD0BEZWkAKoQD:T+KY04RMmSCYmBiF4O7WTKjGCq2iW7z
  • TLSH
    T1AA93FB0263E89619F1F33A3069B522310E7B7CA19E3CD68D0289955D5BF3E90DD74BA3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2