Extracted

• • Target
    2026-07-19_5ac9aea9efd0da5544def119c629dabd_elex_luca-stealer_njrat_remcos_smoke-loader_wapomi
  • Size 528KB
  • SHA256 70181c224b3a677e2e256db804dde9a5be4d57c84f80f44eb80f2eeb2c8cca06
  • MD5 5ac9aea9efd0da5544def119c629dabd
  • SHA1 ecd6b84657143e291001d93a3f156eba422c167a
  • SHA512 e7dc67cd5f206ecb8df46af758266411cfb12fdc3edb0fa2020a8e8b0bf776ed58a37c9351b3883cbb920f7d71f0e56e6662b1a5ee6a13f88c08fc37abeeed63
  • SSDEEP 6144:whccNOgAlw7pqyvigOffs08jN6p06dN209+w80J6TbNEkG0lMQmg/+yAOnSZuLT:w1vP1vOf0TIp0mN209vJ6vNtM49xa
  • TLSH
    T14BB4CF10F9A2E032D4B21171527C9BA35D3C6A31033A56EFA7C849B92F785C1A739F67
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2