Extracted

• • Target
    2026-07-19_62fe2bb9815bb190e84dd62035cf66c5_darkgate_elex_rhadamanthys_smoke-loader_stop_wapomi
  • Size 2.5MB
  • SHA256 f000c1033c9f33f148bf9bed75701cea217bd0672e8610a101c67f3ddcf8561d
  • MD5 62fe2bb9815bb190e84dd62035cf66c5
  • SHA1 bf1fbf3ffe13cc7ac841bfa7c1f1dfb657e3db84
  • SHA512 478dd4cbf930d9e070d3da303d66ee92166983ce52358b1b1819f2fb6a579d7c62b5b2da9793d5c6227c52cc3ed5ae36e1db9f3786fd65c20200b241d5ab0671
  • SSDEEP 49152:xo49XW7Aiap01qksvbrfIOHypdloa2gBwB3u6LKeCOA1Fs79ZdePubSeRUAxAkJ3:hdWkRpksvvfIOHypdlgg2BvLKeCOA1FC
  • TLSH
    T1ADC59D117BC28076D2773231855E737AE669EA705B3886CB56902F392E346C3AD3931F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2