Extracted

• • Target
    2026-08-03_d68b24452bca48e7b8f43313df885d19_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil_smoke-loader_wapomi
  • Size 1.5MB
  • SHA256 c03b100c7accd28dacfa4f0d2c6daa044033620d838e2958c6c2fd3a2854d449
  • MD5 d68b24452bca48e7b8f43313df885d19
  • SHA1 494b8c6f42c7fe9a624e753141aa39c7a4b82494
  • SHA512 cffc733e4c981ef3a57728a4b060e985c192f5d9d98e70df977b4e46f2d9cc58220ccccca94159b120cf2ae429f10bd33c7f3324d24bf03e4217e41d47c2073b
  • SSDEEP 49152:aeBIqyCrmzsEKD2tB5YRhiAS5drHXaPe8ch9ge:aP1QmzTCEB5ehiDXr3
  • TLSH
    T11075BF13FA8284B3E4C61535A2BB577B5D3AE5206328D9E3C7A01D748D302D1673E7EA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2