Extracted

• • Target
    2026-08-02_9a93d3c8cc20da1c436b0cb6b5403378_amadey_elex_icedid_luca-stealer_njrat_smoke-loader_wapomi
  • Size 4.5MB
  • SHA256 465c6bc3e1abd685302e9adcccd7097b2ec75823da114940984498898072f22d
  • MD5 9a93d3c8cc20da1c436b0cb6b5403378
  • SHA1 6956c88a428424a687c86dbb20d488a7b95363fa
  • SHA512 1d239012b51085401f2fac4281265ddfdc2b1c648e60dc516a911cb90f34b6baa4e0ed0fad5104d6eb006327c6412aadd9fa6cadc8ead582b1963a1a5216cbc4
  • SSDEEP 98304:wJiQJH4SR8UX+aQ1Mr1XIAVhqadt+Q0fxLxkFf567PrDiOpZbS:+ikPqie0+jkZ567PrmOpZbS
  • TLSH
    T1882639707E6D8065C51A22308D2EB9A4F3AF5F613BE341E706447769EB303A2EF21567
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2