Extracted

• • Target
    2026-10-17_d0dc8e167cade9a506b238efa481696d_elex_smoke-loader_wapomi
  • Size 181KB
  • SHA256 95338607170b2471acd36a294b0c1e433ac6fecbcde408057918ee1d0c3623a8
  • MD5 d0dc8e167cade9a506b238efa481696d
  • SHA1 0639cfc8dabfdb60ce03c0503091f99fa4eeeb30
  • SHA512 18cd5cbc9ccc097c8b22b80f9dc19f546728032b3627a256acd04f645873ae5e5faed8d08ef9391fe358b2a6519a1f4b19177dbaa56404c09f922b5bcf95bc2a
  • SSDEEP 3072:l20Ig0skKCnPiF2YuVvF193D17UCT1WxXG4JZHyL9AktY7+JJcfw4GCH:cA0sfCy2Ddp7h1KXJZHMtY7Og+
  • TLSH
    T136046C323EE4C977D2430531CED86BF5E1F5D6680E62486323D84B2C6A79D95C32AB2D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2