Extracted

• • Target
    2026-11-09_26fe4a210704b09cb6bb5ac2a9b7b05f_elex_remcos_smoke-loader_wapomi
  • Size 2.0MB
  • SHA256 1f7e748f69e93b33f95c0da7b1216c52049ff3a641e0578a072799eaea4314a4
  • MD5 26fe4a210704b09cb6bb5ac2a9b7b05f
  • SHA1 b662f1a67856f6cd3384bd6b1f2c7307c09379ed
  • SHA512 8be548af118dbe129c87c61de250c26e59c2030642cc7efbefb8a4d643b94fc34dfdc4d50ce7e003709fa17241b139a04dab715fda24326bbdf3d43c41b56a37
  • SSDEEP 24576:twE8WQrujuTOmt14DClBuaCE+iWDBo2R7F3owVMqbCZ1be2/iJQeHNYB31GlXYHH:tLPbLQOYBVGyx90yCk1zOutfTTupnoT
  • TLSH
    T111A59DB1B5C3417AC49219322186F33AEA659F0A052499D35FC93E777F30A205E6FA4F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2