Extracted

• • Target
    2026-08-01_440ea5caf8015317f7ee7fa9f105bb9c_amadey_cobalt-strike_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi
  • Size 798KB
  • SHA256 2ebd64bb21cd217dcfb95a0eca6b805a7f88339872feca95c5080f1f4577e3f8
  • MD5 440ea5caf8015317f7ee7fa9f105bb9c
  • SHA1 968a5975347074a45422c211aac10031fa3a61b1
  • SHA512 838d285870ea8eac5e869a8aca3bda1a9084609fe58965847f8b25014d8ed80c1ab8a9a21aa6da35ed172e6f67fb989963eb95cc8715305742623391044fbdf0
  • SSDEEP 24576:JYugd9XxZBEjLUlh8pWqn3JTQ+4uvKuXHFOm5:qXZBqxIu1Oq
  • TLSH
    T1FC059E61BE41C0B3E26101759475EBF60C396D3887209ACBE3D07F75AA302D1AE3B65E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2