Extracted

• • Target
    2026-07-17_b02d97c7c12ce16b0d6d15231787de3a_elex_luca-stealer_njrat_remcos_smoke-loader_wapomi
  • Size 121KB
  • SHA256 4e2bfd1ee11ca1e4afb8fd174aae01ce350bc64d37929dc8fe3c1d65a91be168
  • MD5 b02d97c7c12ce16b0d6d15231787de3a
  • SHA1 7124bb7448f10b300a806fdfd96e4536bc080389
  • SHA512 e6501faa62a6d0629d963ea264e3c00d9b8846254ccc5f4b4ea42f0b2a59c9fb98681061335398e5813e5c101656e2285cf154de91f0ed3fbaa7b3f7e5876cd4
  • SSDEEP 3072:+bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlNGCH:+PrwRhte1XsE1l4
  • TLSH
    T1C8C38D1178C0C472E5B32A361574DAB14A6DFD700E759FAF6398027A4FA01C09A3AFB7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2