Extracted

• • Target
    2026-08-20_b5c5a9a6b1b5e2f58d97e068b612eb33_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 31KB
  • SHA256 768fa7ffdd6d50940cbdf791f317a478cda88b1498050490a64699aff764ee10
  • MD5 b5c5a9a6b1b5e2f58d97e068b612eb33
  • SHA1 492b0bc321a240df2128ecc943788083c1784294
  • SHA512 138ac32d7bc230e4671cc377c87815dd106b44c7f7f029728d5ae387bcc4681a57c4934f9cd2ede7240b3859b612d6c585b909e296aa7797e8a39d28061c2cab
  • SSDEEP 768:eWQ3655Kv1KLqY1Mi0t6QGPL4vzZq2o9W7GsxBbPr:eHqaNSV0t5GCq2iW7z
  • TLSH
    T1A2E28D53CF9054F6F7EF253160FA3A478AB7AD2049A4EE5F83707A9E1C34600E866257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2