Extracted

• • Target
    2026-08-25_87a76b3d1e5a50cbd2c208507be4f0b6_amadey_elex_mafia_smoke-loader_wapomi
  • Size 310KB
  • SHA256 6c08df6896975288dc1a707237fe41bbbefca30782bbe5e95d41d2f4081a4147
  • MD5 87a76b3d1e5a50cbd2c208507be4f0b6
  • SHA1 04c77f3f74aa1b7743979513b5de3ad992e95e37
  • SHA512 da5897a38f9fd3f94100b353db9ffcf6428be14d7c4d3c4a162ae3ba2f93fafe2bb2d48fca0becfcc31330105a3d898ca238c746f2618cdeceb3be5d7e5df130
  • SSDEEP 6144:XhItQUyP6Cwt4AFnUTH86BEUCqqSGQYZOq4onaBzFYvG2:XFP6Cwt0TH8uCPSGHZOq/naBza
  • TLSH
    T1A0649D1077D1D032D8A310748A6A8BAB8D7DA0622B6568C7B7DC4B7D5F603C2EB3574E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2