Extracted

• • Target
    2026-08-20_d079c5b5500a3c1711245a151ac3331d_elex_smoke-loader_wapomi
  • Size 19KB
  • SHA256 ad4f16e8f5e4fdf73b032c470a0cf3cb027e556b3d693ff525cf384ff445d914
  • MD5 d079c5b5500a3c1711245a151ac3331d
  • SHA1 5b96ed9d0f1c08e52c33cd53bef8e66ff9411cc2
  • SHA512 113ba38785e0b9f40f43c31f486e148c15da929d6aed1026a2a4a937abbf6665d0702da1ba164b375d9bde4e7c7e023487c58c306902f3617e18c830f0751be3
  • SSDEEP 384:1FBSJXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:0HQGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T15D92BFA38BC084BFC0DA367220D33713CF6B4A3096BA65AFA2A144777D56A00DC671A5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2