Extracted

• • Target
    2026-09-08_ba994d78290f2e2ceed5421c924eb89b_elex_smoke-loader_wapomi
  • Size 42KB
  • SHA256 3d911458b0492c5509811e753f8268dce45d5aad537779d544041ccaea3ce1c8
  • MD5 ba994d78290f2e2ceed5421c924eb89b
  • SHA1 e8253187ddf47bb489fc22dab75bd793b7262c36
  • SHA512 065a399da3261ea5c002564c8059a9473316a6c544a5032177db594a1a5c26cc35654ae63f662f3d36d597f2b44ec8247c0bcd75cf5c41f750767c0530dada5c
  • SSDEEP 768:F0l/6ReetQWPdcKdamFpQGPL4vzZq2o9W7GsxBbPr:6/l+dl+GCq2iW7z
  • TLSH
    T196135B099B0394F2E49306F112CB85FF576CB95184259D3FFAEC8C25AB26E40A83D339
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2