Extracted

• • Target
    2026-09-26_12b3f9b50cae2b6a66f505974750f760_elex_smoke-loader_stealc_wapomi
  • Size 388KB
  • SHA256 1cb342624227cd8a2272b8c6d764d48a5527111a499ca1571227445e820331af
  • MD5 12b3f9b50cae2b6a66f505974750f760
  • SHA1 992c4c592bc10a80a7fabc7e4e9e550733680874
  • SHA512 27a22cf5bf4f9ac33ae16c59e51db5cf8b0fc03975780c708140967bcaf11d8fe486314c1a9e374a6461023f88b2e1e52d66d83af3bf7a3c3879a1bdf90bea5a
  • SSDEEP 3072:t7rIfTkqIKDug8tAZsyyXUg8p3Xh69i2g3tvVs07dzIHsbj0rkSzPXyGCH:t7uIKDwMyXl8pnh6o2gdyazIHLk+L
  • TLSH
    T1F1849EF22280C0B1C41012F95466BBB1AAFEB4725371B5C73BDC06796B587F4AA3964F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2