Extracted

• • Target
    2026-10-28_801cbd987444da2601ea57d4994e3905_elex_smoke-loader_wapomi
  • Size 4.4MB
  • SHA256 f7f0a7546ba2a6ee13b4014239693b0b18c08017000f51b2612a58f75e7ba646
  • MD5 801cbd987444da2601ea57d4994e3905
  • SHA1 006ab568f542e6a7fd6ecce897f064fb788a99d1
  • SHA512 a187c5e76f3720eb0b6eabfba7b21e75536aa940d1482fc6da9c869edae8351f31f288712d5063bd478bfed0aec03e0cb32972922941ff28caee7865866d7ba4
  • SSDEEP 98304:hhZa+r+9qdjK/+jVzW5kXMXkmjP5vx8hf1XFfWocW:hH1rUgq+jljiXlv6hfjfdc
  • TLSH
    T1DE263348F5D94C20C03A32B5EECBC9681762ECA604215D373BE77BCE776A2525EA530D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2