Extracted

• • Target
    2026-08-02_63bcf54cbdf4e6fea7a34011e02a6378_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_smoke-loader_wapomi
  • Size 3.0MB
  • SHA256 b6730cfde4af22a95ef1d1e69e231bcb51002e6303b6e180816fee3e9e377805
  • MD5 63bcf54cbdf4e6fea7a34011e02a6378
  • SHA1 5ef05709729e1fecdefb265c555c631547b04a54
  • SHA512 3ef67036a3c27861dce1493125514b025e6d9bea89e791e8d0b4c45b61e2f87158f7c90ca2f35cf74d3e4b6196c4b9f478a3abb0d834595120432a973e87da62
  • SSDEEP 98304:vzHnj5iV8FSGIkXP9QtSBtwrMt73tgzEQBxKwWqngVAUpJqWgRYsdtnQsdfLQF82:n1tXPZt9t73tgzEQBxKwWqngVAUpJqWR
  • TLSH
    T14CE57D213EB1542BC8630272096DB93D365EBDD0A7BD40E793C7BE182BB55E236311A7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2