Extracted

• • Target
    2026-08-13_fb309113a65c9ca8d303a51578d03189_elex_smoke-loader_wapomi
  • Size 40KB
  • SHA256 a06f5b70b393f16628ee36d12dbb08005cc522ade7174d2a234531b515c76ca1
  • MD5 fb309113a65c9ca8d303a51578d03189
  • SHA1 2a530e35378d91e43fce32da7e07d4186723bc63
  • SHA512 e6ac742b7d46b2cecf86d8ef715dfb45811e4bf1f5c2b2a0c1baf4d1065e951e86ffb26236ebdc14231b9850cfba18f4c7adfe9f79286ca1a11afe00a55fc35e
  • SSDEEP 384:4wsxExsgs3OV6CS1XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:sxELUrrQGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T19203485A4E83046BF4892D32D2D122C64FFEAC23B6E771BFCF620415189590E98E5EF5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2