Extracted

• • Target
    2026-09-03_3780a5c4393d08438309a053f55e755d_elex_smoke-loader_wapomi
  • Size 32KB
  • SHA256 7138a784b6181776bf9a74eaa51f357d2eb3a6e6a806aa82a797f5865a97f7bf
  • MD5 3780a5c4393d08438309a053f55e755d
  • SHA1 ff73f1827a275452a13cb21ccaac6845d84c661c
  • SHA512 7d73cf89f91baff51edd7dd0ed9db9639d4462f574eeedf6bab3132b1d44af00dab939cbe9d65c4a6d487ee1e37c200acada6ae4bcf383c840c63203c17acab1
  • SSDEEP 768:bQGPL4vzZq2o9W7GsxBbPr1tQGPL4vzZq2o9W7GsxBbPr:cGCq2iW7zpaGCq2iW7z
  • TLSH
    T11DE2BFF28FC098FFC4CD353350863687CB7B8570DABA75BF82618867289AE05EC65495
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2