Extracted

• • Target
    2026-08-23_8222ce194d65cb480746a78bb132665b_elex_smoke-loader_wapomi
  • Size 141KB
  • SHA256 72ce64854ac35488086af43bf8362aa43ef2b7361dd7c5c411ff6a69f1318e7c
  • MD5 8222ce194d65cb480746a78bb132665b
  • SHA1 84050cfb4314c52c8d58ffc057c81c95ad957091
  • SHA512 bf5f8198a428c59c68f1c2b2aa2e5db16ec290220f13820f595fd1c5314fa0e16183050aeb887f7bfd7f43bd1366f964e90c2fcb0040c6980e2663d1cb9bbb52
  • SSDEEP 3072:GmE37oFd4YqOD2BE8NZkSCfCXtbx1LEdbRR9B8baGCH:GS3j2r5CaXh3LEdbn+r
  • TLSH
    T13FE302A38B97C56DC1C823335043EA88AE25D55D9B2CD7DBD424E0237F1EB4B411B9EA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2