Extracted

• • Target
    2026-08-02_6f3e267a0c50d867fdf0896be5351a2c_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_smoke-loader_wapomi
  • Size 686KB
  • SHA256 528d196225b80c90cc011f971ca8b4ade7e4ef2f39d2221303b96dffb29f160d
  • MD5 6f3e267a0c50d867fdf0896be5351a2c
  • SHA1 5a200103de46f7690b4e61244811960764678ea2
  • SHA512 68b20a3b659b02b3727d2ca352bf7109857c1b2f7344cea3a4ed8db6971fc96ea2d2fd295a08e091ce6802b571f76d57054021c5bdd49da5158c176ce165ab8a
  • SSDEEP 12288:Pz14TZYCdvf/WCCr8+bNlz+OeO+OeNhBBhhBBHClpYZjMsYEe1azQ3+04DdibJnr:Pq1fObNlS3OsQaKZSqw7m9dgk
  • TLSH
    T131E49E31B683D13AC47110F04D7CEB9A642EFD260B655EDBB3C84B3D5A351D21E32A6A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2