Extracted

• • Target
    2026-08-27_1773911228086515f3d26ce1d0832a86_elex_smoke-loader_trickbot_wapomi
  • Size 320KB
  • SHA256 2dc3f39a0a9bca06e59da76aae5f83979da456b7925340ca68bf5439d85b23f1
  • MD5 1773911228086515f3d26ce1d0832a86
  • SHA1 23096ab8c2c684bf7482555bca3301792b29c18d
  • SHA512 6db9d70087abe1bd9e72a538a8f88917503997038646d870dbb9d4df548b289f64d329a79f8065cdece9108bd83a7925ece4274e2887e9f674e68629c0c55fd9
  • SSDEEP 6144:ZQcaVpy1FeGkauToFZalhAK9tXqAuReydv4jXUWGPCZVSbXCVRYSKRZpkq1ZBjHf:KlpyfeGkbTmLK9QY5jkrP40bXCJKzD
  • TLSH
    T16764BF447D50D0B4C89240B602AEBF76FE781AF50426A5C3DB94E9A12E742A2FF3735D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2