Extracted

• • Target
    2026-08-19_3a9c31fa321c7ad4a7059ab04f1040a0_conti_elex_smoke-loader_wapomi
  • Size 51KB
  • SHA256 80259e6c1b5de8baad0112715a0658eb90db529be1a0502d2d0757f6e3b98ed7
  • MD5 3a9c31fa321c7ad4a7059ab04f1040a0
  • SHA1 88638bbfde277141e322d091671ff16c5a5709b5
  • SHA512 e7963acb20f05ac28ac3e2f7c067b6e0227f906cf9d4c0b6bcd3abcf857e9ea3b1fa4ab70bae4735bcdf597887bdf9c83bf0ae510bbdb8f3170781127db330d2
  • SSDEEP 768:nf0lJYZYR+n947LNYB2gL777777777777777777777777777777KJNcV2+UW6gko:nf0vG4vW0rWLkqGCq2iW7z
  • TLSH
    T1FD333A59EA8AD0F6F651B27181FBFBFACA6697120060F777FB8D925DF032542E409006
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2