Extracted

• • Target
    2026-08-22_466b67619c920e162412f897b5874bb6_elex_smoke-loader_wapomi
  • Size 69KB
  • SHA256 c1ad88b6162e69a45d7612c558c921b7573fe3463bd9e213cba1d1485de57a88
  • MD5 466b67619c920e162412f897b5874bb6
  • SHA1 90f82d3d486c4806b86e9d6c47b62b49572a61db
  • SHA512 9ac6654b0577cf9f4260ecf5381d525d137f8636ff7d45063d05ed2c92a91cf97a16cb94bcad1e06845b8b2b6924d59ecec5de6b9e51276c33fa5128f60e005a
  • SSDEEP 1536:SlAODY1bHPhXzlybFCR6enZ1RJXGCq2iW7z:SVDbSzLGCH
  • TLSH
    T123636D137A4E8471D98062F02835BBEB83BBAD310B6562D7B7C49E7B0A602D17D72917
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2