Extracted

• • Target
    2026-08-27_4cabb06848a54f82a5059361b5a14cc5_elex_smoke-loader_trickbot_wapomi
  • Size 320KB
  • SHA256 347ac8195f0b9e06c0d206b50764cc250f8ae5659ad0bf42840c26381ecb2488
  • MD5 4cabb06848a54f82a5059361b5a14cc5
  • SHA1 37fa5f7a280157c498fddb06d9f812cd0375c9f5
  • SHA512 87999e8f22dbbb6ec261811e7fbfe2510feffe7d9bfafa78fc065483d02ed7feafa64396105fb0cb8fdf302d247f7078a6f938f95b87314e8cfbb86f39b05884
  • SSDEEP 6144:ZQcaVpy1FeGkauToFZalhAK9tXqAuReydv4jXUWGPCZVSbXCVRYSKRZpkq1ZBjHZ:KlpyfeGkbTmLK9QY5jkrP40bXCJKzD
  • TLSH
    T14964BF447D50D0B4C89240B602AEBF76FE781AF50426A5C3DB94E9A12E742A2FF3735D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2