Extracted

• • Target
    2026-07-02_21d0fba0d85606c4a710e43e2ec159d1_elex_luca-stealer_njrat_remcos_smoke-loader_wapomi
  • Size 121KB
  • SHA256 9e174c07599dbc02350e21be9cc0ca4558a56155331b092cfe3efbad543e2612
  • MD5 21d0fba0d85606c4a710e43e2ec159d1
  • SHA1 114575be2ffc0496703451ce7d96394cb5a7b057
  • SHA512 457510d3ca65f213dc23825f827601a3f5b0c12768ef24291a766235add92c15edaf5f4fca08b76518fa650617dfe3390029a1893bd742d59f81506863711bad
  • SSDEEP 3072:+bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlRGCH:+PrwRhte1XsE1lE
  • TLSH
    T12CC38D1178C0C472E5B32A361574DAA14A6DFD700E759FAF6398027A4FA41C09A3AFB7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2