Extracted

• • Target
    2026-09-03_96c348f97dd33739353ce79a18687db0_elex_smoke-loader_wapomi
  • Size 39KB
  • SHA256 95f77ae6864bba84d7fe36bb71d2f64d439b81d2b7b2ae43aa8a6a0a908a2bd2
  • MD5 96c348f97dd33739353ce79a18687db0
  • SHA1 76a7c5407c6e0a1196e09b141dae388d1d4b3d29
  • SHA512 e50228622963fd9bba3b8e764ea229b2c034a4cbafb01f2dc843f1dd665af45342ad72b25210faf62b3976c4ccef7b4b84d170ce0158d971b1a51391977fc5e4
  • SSDEEP 768:IOrQiAG7JnALDPVSD8RAnsOZ93N61gLKxJQGPL4vzZq2o9W7GsxBbPr:IOrQip7JSDPVTisOZ93mxeGCq2iW7z
  • TLSH
    T1E503AF630B40F47DD4DF1070914EA2730BBF29B58BA5A3CFE1E58A8668787D8AC35647
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2