Extracted

• • Target
    2026-08-20_837ea83e142e54f6705778bb79b3e9f0_elex_smoke-loader_trickbot_wapomi
  • Size 320KB
  • SHA256 9fc936e292b7b37ec860bad64c2b533bfef815f7be0150627a0aa80a121d0628
  • MD5 837ea83e142e54f6705778bb79b3e9f0
  • SHA1 9040f4531ae625fb6900aa51a58752cb9e8aba2f
  • SHA512 3b7c7b9a36d436ce8168a97d75308026694d2764d376be3afdca1c83c268b714d8b0664ff2b2d7a8c4d792439037c38209172c3757d5d2c656912926b49d9fff
  • SSDEEP 6144:ZQcaVpy1FeGkauToFZalhAK9tXqAuReydv4jXUWGPCZVSbXCVRYSKRZpkq1ZBjHu:KlpyfeGkbTmLK9QY5jkrP40bXCJKzD
  • TLSH
    T1F664BF447D50D0B4C89240B602AEBF76FE781AF50426A5C3DB94E9A12E742A2FF3735D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2