Extracted

• • Target
    2026-08-20_84cfcb934491d2f9609152cf82ea730f_elex_smoke-loader_wapomi
  • Size 28KB
  • SHA256 6425def9b1c0f6f5ec4dd4a52ead2b1e7639f0944f37131fefde53f7ebff5efd
  • MD5 84cfcb934491d2f9609152cf82ea730f
  • SHA1 399bcc59d072c74a6cb1eae651ec70ca697734e6
  • SHA512 8a0ed3746cca8017772efa4073fa2683b22f84ab37ae4123131a1f2d5a7954d79fc339d98d760ca2c2de61a6f2ed2902f0f659a7e4023541c237578d8280eb32
  • SSDEEP 768:aW29n/P4/C9tY+gJXokQGPL4vzZq2o9W7GsxBbPr:wPZnYro3GCq2iW7z
  • TLSH
    T184D2BE43EE8058B2CFDD107120372956CBAB62309BA9B6E7EB5144660DF5690FC7A01F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2