Extracted

• • Target
    2026-10-11_923058956a262e772b124f1b7dfef60a_amadey_elex_smoke-loader_wapomi
  • Size 5.4MB
  • SHA256 0988d9d7e33c9d4908829cf8b634e9a23e90d65bd565954b49c38f3e54b342e0
  • MD5 923058956a262e772b124f1b7dfef60a
  • SHA1 2afee37bf20e7172fc49ed581ba55f60b458a003
  • SHA512 7655c6f82842a4d07b22eafdca43812b8fdb3b805fca101bd050c88dd80ba97edfea21923c21c27f0dc04c45d10cc6ba0dbc9ae734477689b8db9fef239d9cc3
  • SSDEEP 49152:8mVUFKX4YPqt+dNY8Ra9EZ4oAUZ+ZylT3mw90QE3BUOdAP4WKu2cUS5Ek:8MMKod6NY8Ra9EZ4oAolTEdAP4WKwUS
  • TLSH
    T12A463A00E641911AEDFB34F94AAD727DA60CEEE0171450D741C87AFE9EBA6E13D3019B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2