Extracted

• • Target
    2026-11-03_c88769fdecbb7b98175c1635d7e320cb_elex_smoke-loader_wapomi
  • Size 69KB
  • SHA256 4386ca17fa0e5bebe305ac170c0ef14ab63ed37a2998c142009a10e388f90a7a
  • MD5 c88769fdecbb7b98175c1635d7e320cb
  • SHA1 d126d6b6987d767b23ca81d3106d4ca0a8ff8c38
  • SHA512 670c0e0a977e5f2023d64c61fe9002f1fc5e6119a42b4df269f2d07c576e62c44e151521a67226166ab32a6a8581b1978da11fd3eb683238b62e8e9468fe8051
  • SSDEEP 1536:iQKt8fjqXnviYhb8x//LenDkBT/ri9sGCq2iW7z:fUXnviYhb8t/LenDkBTDiWGCH
  • TLSH
    T174639E42F6C2D4B1D0E4223701FA7BB7A836FC745B2A918BE74139F21CB15A06D2D25B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2