Extracted

• • Target
    2026-10-26_84e9c221c89606658550ce4cdd684974_elex_smoke-loader_wapomi
  • Size 25KB
  • SHA256 2e547569e9e4f43655a00370bf8a2db6b11b6800898ed39b4ba9fd0f6d325049
  • MD5 84e9c221c89606658550ce4cdd684974
  • SHA1 88c3692f81cbd8c06495a0e71b36c794507fa7e9
  • SHA512 80382d1559441ba40e2d413571e54956fe8fad8ad541e10c6af1987fa39274946905131d9b5dcb896679938a02abbfb1d7ca0d9c30ce60cfe5678aa37491fa32
  • SSDEEP 384:1u0kmOVtV2iSAXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:vkdEL4QGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T185C29E138FC140B7C1CA2AB053E252878B7E6C2377F6B1EFE7A2C0591E95604DC625B2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2