Extracted

• • Target
    2026-08-27_925d6f8386d57164c77e25d650ce1059_elex_smoke-loader_wapomi
  • Size 19KB
  • SHA256 640ca33f9b32e78f7958fb10fa0f40cc160b990ecc81bde5682b5e752f6741f7
  • MD5 925d6f8386d57164c77e25d650ce1059
  • SHA1 4c2019f9fc2263ece95a6f25859c25cc47dc60ae
  • SHA512 286942680f73402acd8610258ad30dd4321d4e9b81dde132c3967af54c1183a983394ee111651a70cd3b58cc76a5e6cfec18d95dbf877ac8a54489fd57f53b68
  • SSDEEP 384:1FjSCXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:GWQGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T12C92BFA38FC084BFC0DA367220D23713CF6B453096BA65BFA29044776D56A00DC675A5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2