Extracted

• • Target
    2026-08-27_9caf19c745b8725098136eb0f950f17d_amadey_elex_mafia_smoke-loader_wapomi
  • Size 310KB
  • SHA256 72b7cf126851819436c8aa897ebf1505aad92816bf31bb266843a72c6fe60711
  • MD5 9caf19c745b8725098136eb0f950f17d
  • SHA1 2e90d22c37ad1779c79c460149ae9ab77f005cd9
  • SHA512 cc98b07daf6a8b855a4194ee51360f4449a00c83d7086b51084e08c21729b0d5eaebb3f58b60656955c87b4af1e78738be0ee71ac600a0e3ac88a65aac667ae4
  • SSDEEP 6144:XhItQUyP6Cwt4AFnUTH86BEUCqqSGQYZOq4onaBzFYvGF:XFP6Cwt0TH8uCPSGHZOq/naBza
  • TLSH
    T10E649D1077D1D032D8A310748A6A8BAB8D7DA4622B6568C7B7DC0B7D5F603C2EB3574E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2