Extracted

• • Target
    2026-08-03_e2100c924ffd64209826cbcaed0697b6_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader_wapomi
  • Size 6.9MB
  • SHA256 216a605b30dff23c70167ae8057ea43b970fe9baf05534368309a299a6bee04f
  • MD5 e2100c924ffd64209826cbcaed0697b6
  • SHA1 2b0d19cee95be4df91198f04e4e412ca5c63db7b
  • SHA512 14ab2294b2814cd3661b131aac6643ec4d27da6f7411efcf0c31f1894cc838e95ad10342a40115d3dd95392c2bf41ab49592b121ab2c10d5ead1685acfeb1f3c
  • SSDEEP 196608:XYtWCwNirWI3tndaX1ssweX03s7FWCo2aEjdhOoVK/HpfAoxwEyUlysTNnOo3eoO:XYmOMK/HpfAoJyUlyinLeo2
  • TLSH
    T1BB764A216205D425E99102F1390CE2BA511C7E36CBA648CBF7E45F5E69312E2973AF3F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  adwareaspackv2backdoordiscoveryexecutionbdaejecpersistencespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2