Extracted

• • Target
    2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi
  • Size 500KB
  • SHA256 1cc44379082ec9e37896ea88de3e93a50ea876bbaa84eadb3e81834cfb409c41
  • MD5 ffd5fa44fe0a3ebd4bf3f9dba4c846c6
  • SHA1 476d02ddb7c686559d17de60ae442284a29e2eb1
  • SHA512 aad58f9c5c633a36a0e4edbc67a53ab73bc52190ee2d579869a72f3b051e54a36ea09d4d71c6faf7222d718c19503c67a1acc445be143f4867ce06d0b822df8a
  • SSDEEP 6144:tn1fxSXJ56oQ4OZMAfquGG3UaBXz4wFVU4eOmdhxzCT5jmlMUXAl1vxRMXfk5/XN:tnzSOoQVMAvGGEa1Ewxe9Q5alMf1vAv
  • TLSH
    T1A9B4390639FCC73BE3D24531CE6EBB90B0F5B9684F2148973AD41D1C2A76992E316A1D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2