Extracted

• • Target
    2026-08-20_f6dde7da3e5a72a6d10a30d130e968e6_elex_smoke-loader_wapomi
  • Size 20KB
  • SHA256 417e32cc2397f32dfabbcb8645038162ba291a19b50f0015c87a9102bcff14e2
  • MD5 f6dde7da3e5a72a6d10a30d130e968e6
  • SHA1 413dedc8091fed8e671730f897f5980575d86bb1
  • SHA512 17b94dcf523ca636cffacca889e39e3aba7ec67a834f3bdb7431be3aa593004fa5d8f2a6415251cff2de4e6390b8fcede5925811f797164ee829f97337b240d6
  • SSDEEP 384:rFSZ4kDqw2O2qSiXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:Zuqj7j2QGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T16C92AEE38FC458FFC4CD367600A132478AAB4A3087FDB9EB9671486728966D5AC7418D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2