Extracted

• • Target
    2026-08-25_884d4b2939367d2ace5ccdeaf6eae59b_elex_smoke-loader_trickbot_wapomi
  • Size 320KB
  • SHA256 3e04c4042814ca9dd606955c10b13ca6f99bddc23ab6365b4eaf72ccb47eb870
  • MD5 884d4b2939367d2ace5ccdeaf6eae59b
  • SHA1 d664998bc2101f17215098c0da8f94f7fd0e209c
  • SHA512 bebff3927b053019b930e61367d4d7bd6bd8091804c4a81350bf33af2f778f7126f74062f12c1b311a1a6d4418f41950f81278df8b17ed4130485f21432ac89d
  • SSDEEP 6144:ZQcaVpy1FeGkauToFZalhAK9tXqAuReydv4jXUWGPCZVSbXCVRYSKRZpkq1ZBjH9:KlpyfeGkbTmLK9QY5jkrP40bXCJKzD
  • TLSH
    T1C864BF447D50D0B4C89240B602AEBF76FE781AF50426A5C3DB94E9A12E742A2FF3735D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2