Extracted

• • Target
    2026-08-25_62ff7f6ec08b45d72e8f0b23f3561e8a_amadey_elex_mafia_smoke-loader_wapomi
  • Size 310KB
  • SHA256 521d7ed550380a38a74fc018d4b451132401b7428f6ea10a8d3d56bb9997b617
  • MD5 62ff7f6ec08b45d72e8f0b23f3561e8a
  • SHA1 80223099579ac479e7ac61e2bc5c27d623081c27
  • SHA512 0f007ebffc7247d1dd92dd7f39dcfa35214545f76bf91afdab5423f08d450eecacb6ef4dc286839dde002855cfeac2d0eb6c5afb9c28cdd9302dc5852a55c6c1
  • SSDEEP 6144:XhItQUyP6Cwt4AFnUTH86BEUCqqSGQYZOq4onaBzFYvGe:XFP6Cwt0TH8uCPSGHZOq/naBza
  • TLSH
    T153649D1077D1D032D8A310748A6A8BAB8D7DA0622B6568C7B7DC4B7D5F603C2EB3574E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2