Extracted

• • Target
    2026-08-27_14ca28ce30ccd70ec57ba853ac63c1b9_elex_smoke-loader_wapomi
  • Size 92KB
  • SHA256 50ec88f86b95e9d6f75225f41a9eb56754d801e6e6cc650f5775081e4b4e029f
  • MD5 14ca28ce30ccd70ec57ba853ac63c1b9
  • SHA1 dede109850cdfc0682d0424307f7377111875547
  • SHA512 31e593a9cc908117dda5484403fc018a89dcf5d04b76ab5e2f1095d6f9e192a6c88f4d18d6d22393ecec0047b40f6df71bd2029f80c710d708e6600a68a311fd
  • SSDEEP 768:3HrhT5+KybRpnE8K74kca7NerB8iXpYmRRXvdi82BSOe9oKSJ2SLD0BEZWkACiQD:T+KY04RMmSCYmBiF4O7WTCRGCq2iW7z
  • TLSH
    T106930B0263E89619F1F33A3069B522310E7B7CA19E3CD68D0289915D5BF3E90DD74BA3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2