Extracted

• • Target
    2026-09-29_220afb1f5741fc555a3941e40b7885ee_elex_smoke-loader_wapomi
  • Size 67KB
  • SHA256 c8eaa16b6ccf54c7988e5999f0b298203e5fd60bd4075043ddf45dff48232ca8
  • MD5 220afb1f5741fc555a3941e40b7885ee
  • SHA1 9358bf3ccc2f87bd6eb0a4da1922bb53bf8d32fd
  • SHA512 852c3940da612066f4e62354a0ce2c713f150e7cb97718beb00642a09036540eefa7cc466c8e94e060f217624856310982233b74a0b66a53613f16d8636d210f
  • SSDEEP 1536:cL3h0kozwYEZgYPXF/fZ8Ql3GCq2iW7z:Sz9F3Z8QlGCH
  • TLSH
    T1CC638E237E0A8471D58452F168347BDB87BBF9360B7523D7B3C09D6E4A102D26D7391A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2