Extracted

• • Target
    2026-07-29_8633d9c777621490c8eb8340a405592e_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop_wapomi
  • Size 446KB
  • SHA256 ee25a14f36420e98abd50b386b3bf6a8e0a51d8945928f76440b951d11b43dd7
  • MD5 8633d9c777621490c8eb8340a405592e
  • SHA1 f2f21af30581c22fc8b232df206b0f8a239c6119
  • SHA512 b8960144da33e1bcee188472251af82668bd5be1ea9b3e73758fc933a1d3865eaa78266faeacb8013160d40252a2d10d4068e3a6e666a9d7b073fc5cadf6aa6b
  • SSDEEP 6144:yWCK+rgkAKNwRJIU1REBAQBa7VE8dvTPJotJ9+siJAXSwlmoLGf:C3NwwU1REBAa6vT2tJMsiBoLG
  • TLSH
    T188A47D227B81D0B7C22230744B97E3796AEEAC615E2543877B903B7D5E30192DD39B1E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2