Extracted

• • Target
    2026-09-08_8b813ac1f3fb1fe1192550ca07cca718_elex_smoke-loader_wapomi
  • Size 31KB
  • SHA256 8c185d268691870404d499923cbc16c33fe27635e326f3e4ff2c7b9efe5ca71c
  • MD5 8b813ac1f3fb1fe1192550ca07cca718
  • SHA1 60e8c461379fff52b17a86eb1b9a77334a26b705
  • SHA512 c75c5e5c07dc4839fe4c60a08d8af211d76d3119344816742140d79ffa17eeab753a02bb47603ac0f9a99088cc7d06974f61e582d2398f84d52868add6569353
  • SSDEEP 384:gS2HYUDLo/RMT2VZkSJXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9Pfj:gSSkRHQGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T145E29E86BF83A8F7D89725F040D7A7FBC77FA8114D75883AD270E9706A07850AC2552D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2