Extracted

• • Target
    2026-08-18_1b00540e8b37c54a6ce78ccaed8723dd_elex_smoke-loader_wapomi
  • Size 5.7MB
  • SHA256 83b247fa707a459997a01120005f26ca2fb6671a1fab40b2bc5a3a44c334abe2
  • MD5 1b00540e8b37c54a6ce78ccaed8723dd
  • SHA1 8c351571114d5ef3eae1ce8aa78ac131193d7688
  • SHA512 49d7a5c55863db2ed714937147b578f152580ed02e2df7ac360fbe25674da09d122a757050f35f40bb5b07469d4480a7fd0a1fd54735becf05b3e31e3c0318bf
  • SSDEEP 98304:tCY2wl326vssJOUZtZHnFZByHFwhbOFOJ3qNyyceVYt7yPdFeA7zWN3MqxfwPPzR:tCc31vss8MtZHtcwI0J3qNTceet7yfmW
  • TLSH
    T11F56335B3981E1EDE0C21C71B51E7FD302B2AB264DD185352E823D8154A2FBBA19F16F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2