Extracted

• • Target
    2026-08-02_63373365e020b68f59c248861e6de0f2_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_smoke-loader_wapomi
  • Size 3.0MB
  • SHA256 925559dbe35ef9d7a86d6a0b45d0d5768b7d809c1e84d58986dd47c9f91abd96
  • MD5 63373365e020b68f59c248861e6de0f2
  • SHA1 69abd45e091f86a08b8e72fa9a8f3b3cbf470b25
  • SHA512 883feae9c486afdfaa17f63527ed9c4a8c08b170fd3ad2c768b0736eb8f758ae15407dd44bca7df32f5d39b62177be4b47ff1daa3453e826ae0f1aa5a9c088b7
  • SSDEEP 49152:d1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqfxZOWX:YnCG4h7FiRA7WkAbJ0rCmIZDjNJG
  • TLSH
    T1B2E59E21BDB18527C46303328D6EF67D316DBD742B3481C763CB3A5C29386E15A3A6A7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2