Extracted

• • Target
    2026-08-03_8a41b3850ff5c3bedd843d9370ac6e30_cobalt-strike_elex_frostygoop_ghostlocker_hive_salatstealer_sliver_smoke-loader_wapomi
  • Size 2.5MB
  • SHA256 5e5435840174fd0fff5d2899363e71bcebf6982ea795f025ca3c7931107dff29
  • MD5 8a41b3850ff5c3bedd843d9370ac6e30
  • SHA1 f53b0b1d8d91f02f5d6f1a82dcb11eef01db4634
  • SHA512 b4c86ce9edbd4fde9d4a8568edee47203b6579515c113cb59194b8a56f155d8a1d9fb15dbc48048cdcd1edf617ae3122650715bd458a2adf3bf8cc7030b9152f
  • SSDEEP 49152:5bwD+vrVjTYa1i18iGDKxPHhhWRy0CbJ:5buqBC18HWjhqQbJ
  • TLSH
    T117C57C40FCDB64F1E942163148A352BF2334AD091F35EF87E9447B7AEC73AA11A36259
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2