Extracted

• • Target
    2026-11-03_cac0146dc6c99b06ca17d45d7260e3ab_amadey_elex_smoke-loader_wannacry_wapomi
  • Size 31KB
  • SHA256 45430ad0589f9d8cd3a251f91ff7f99bc7a7befe2e65d478db453eb9471c5908
  • MD5 cac0146dc6c99b06ca17d45d7260e3ab
  • SHA1 f871aaab66ac53772d05cd9dec2313a8359b68b5
  • SHA512 52317866167c984dbd325dc4d8cc6c2d0edbbdebf5487a839bdf565f0c0fea34c8835f3f8d293523e6d24be439bc80730f66522a36725e13b959c39e30e19b22
  • SSDEEP 768:uWQ3655Kv1X/qY1MSdM0QGPL4vzZq2o9W7GsxBbPr:uHqaNrFdMnGCq2iW7z
  • TLSH
    T194E28E53CF9054F6F7EF253160FA3A478AB7AD2089A4EE5F83707A9D1C34600E862257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2