Extracted

• • Target
    2026-08-02_199139f7ec273622b13b086295a0a8b1_darkgate_elex_mafia_smoke-loader_wapomi
  • Size 1.6MB
  • SHA256 fda84d0369aff104065d7b14b8d4149caaab4ba2d7bb352a9cf01629f377b128
  • MD5 199139f7ec273622b13b086295a0a8b1
  • SHA1 2d4dca29020fd5b5085e97c8d49016076577b042
  • SHA512 c1fe89e0e3f946366135ed5632f90f18a265e0b3b9b8d14517c061caaecf110754bdeeb6cdd13b9cdacd9b87714a5c3b9ee4c0e13d4e2a72f054a2af33a50259
  • SSDEEP 49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0
  • TLSH
    T16F759D3136908077C67B32319B9AA3FDB6F9A5304D35524B56A10E3C2E709D3A92C76F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2