Extracted

• • Target
    2026-09-24_85538ed1724f9837ed318c769a3d4e0e_elex_keygen_smoke-loader_wapomi
  • Size 71KB
  • SHA256 e8cf03634fd82cc4eb0a164742dfdbf9c58beb3fce3cdf537a55ef29e9e8fc75
  • MD5 85538ed1724f9837ed318c769a3d4e0e
  • SHA1 fcf3c16f80857c53b0ca303930755c1627affafe
  • SHA512 3d0492bf27ffb28e9ac703b873ca97ce51e2e70e4bd2232414ed7e98d96b2ef1345cc65c196130be38917f3551f9b1a4b21450611edad93fc9d69aa4129e4ade
  • SSDEEP 1536:37NZ8Zg2HSBl+xzn4vyHezNDbFNoC2GCq2iW7z:3v8S2NxTkHzN8GCH
  • TLSH
    T1CB637C12CA5F04F5D85E093280A64B2D4AF5379DF3828E6BB25E21B5FAB78CD785470C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2