Extracted

• • Target
    2026-11-03_e5f4ed18abe58a9fe359bb2ccbc2efe0_elex_smoke-loader_wapomi
  • Size 43KB
  • SHA256 1ede84bf92d2a4271dd6c76388d0d08f7dd9ece99fd4cbc1251dd60817e51ec8
  • MD5 e5f4ed18abe58a9fe359bb2ccbc2efe0
  • SHA1 3971ace96455b0cb86b6c97deda3cd1ae93da3d1
  • SHA512 52b331cf0dffa12e35cee1de0c257d4819fe245ebdd86395d9ace18a0cd95629f44d503e3a5ce4eaab874469dff5d937b44b5aa04a36599bc2884afd95385f60
  • SSDEEP 768:Kqibdn5Q8rHU8txUZfp4Ej0MQIbP0QGPL4vzZq2o9W7GsxBbPr:EZn5vNtxGaMrPnGCq2iW7z
  • TLSH
    T1BB13AD715FD052BBC4C411B2113B6752E77AAF310BB6E86787F42A391C72984BD0839B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2