Extracted

• • Target
    2026-08-27_ea421a9994e87e85d9d0a1657c7457a7_amadey_elex_mafia_smoke-loader_wapomi
  • Size 310KB
  • SHA256 7e03a41b35ed470408f960b3ebcebb9cf1d137df3bf9dd45c3c36377bbbbb7a6
  • MD5 ea421a9994e87e85d9d0a1657c7457a7
  • SHA1 c28a12c6ed18524b6f1f302541f5928c63888013
  • SHA512 29dbac69d900d3aa3db17310efc1b1c71d09dddefc7da9372c9892f816bcf33011238f6c8ba0239488774024e207acf0393dd7561d41a6c9476dea9ff24352e8
  • SSDEEP 6144:XhItQUyP6Cwt4AFnUTH86BEUCqqSGQYZOq4onaBzFYvGL:XFP6Cwt0TH8uCPSGHZOq/naBza
  • TLSH
    T195649D1077D1D032D8A310748A6A8BAB8D7DA0622B6568C7B7DC4B7D5F603C2EB3574E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2