Extracted

• • Target
    2026-10-25_74ad9eb20d975c400fa0064f25226250_amadey_elex_metamorfo_smoke-loader_wapomi
  • Size 128KB
  • SHA256 2f5331569f85e9706f374e81500821dbce4c8e459eb77fd1d21fd90c3b7ce53b
  • MD5 74ad9eb20d975c400fa0064f25226250
  • SHA1 f1401e64097418cd22a52072bf69a28712a8007e
  • SHA512 a09da8b38b775ea8552d7ee9d70254e46adeb11069809d072345acad9f7829ff64acc83c7a87c1abe52fe77c65c8c70ab0cd7523aa0e1352596d7cefba41aba1
  • SSDEEP 3072:sESHYBMZkC8ZmIGI7DBV03LRV4kzJSGxGCH:PLDBOLLk
  • TLSH
    T1E9D36C2172D6C5B1E5A223B58934AFB6877DFD30CFB251DB63848A1E88211C36D31B67
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2