Extracted

• • Target
    2026-09-03_6e051191cd6aaf70024897592f8cf87c_elex_smoke-loader_stealc_wapomi
  • Size 388KB
  • SHA256 ace62b30450886f422aa1f21376d879cce571c723611483f353916ae265dd3dd
  • MD5 6e051191cd6aaf70024897592f8cf87c
  • SHA1 790f85c43d82121a668e6e13de02dadb93d03add
  • SHA512 4e1b95a879d5cd958ae1158982eed182f1563b745757713a51d87da4fda19307b68f59da5bb630399821859c0c0fe0ae7eea6c372314ded99f58ccf846996c32
  • SSDEEP 3072:t7rIfTkqIKDug8tAZsyyXUg8p3Xh69i2g3tvVs07dzIHsbj0rkSzPXvGCH:t7uIKDwMyXl8pnh6o2gdyazIHLk+m
  • TLSH
    T19B849EF22280C0B1C41012F95466BBB1AAFEB4725371B5C73BDC06796B587F4AA3964F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2