Extracted

• • Target
    2026-09-26_557fc8ba3c7412ee3496ae08e8140600_elex_smoke-loader_wapomi
  • Size 189KB
  • SHA256 c463f3a3a9bebb4de19ca57410f6f3aaf096716c7f02c311d042ba2fef6a1b03
  • MD5 557fc8ba3c7412ee3496ae08e8140600
  • SHA1 5ceedfb07e9ea8f4c4e591c951c838a3bf051b25
  • SHA512 798d24a20e242bdb45473ce25ab00df55e1ef777bfd1274b7b6a01de125dec6209c5182b6d9141f87652f9379f9a677899993d0237ce91ec529ef0d3439217c6
  • SSDEEP 3072:/xHLxWjGH4eB7EzDPqyt3A8QVRQaE0PotNG6hPnWhRxNHI3n8GCH:ZLxWjGHePbtEQaE0Gvoo3nB
  • TLSH
    T14C144A2577E0C071E5B7063039F49B711A7FBC715B7488CBB388462E1A72AD1AA35B27
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2