Extracted

• • Target
    2026-08-05_3dbd2d792e71ea4417ffdbba6b1aec79_elex_emotet_glassworm_hacktools_remcos_smoke-loader_wapomi
  • Size 2.3MB
  • SHA256 e295b2fb5d755b68d354d187e5f874e98cfd81980a4f132c017dd15545be7dbd
  • MD5 3dbd2d792e71ea4417ffdbba6b1aec79
  • SHA1 d8c5485cb813aee2c9c01a306f8c491aef29ee40
  • SHA512 1b40f9d7b8f3d5f007c2f3c0e10e8d99421944367d7a6171b2a893e1a4ab4726c153e998c0717618ba4c5f4350d07729770d33dbcd14c5ff356b0e4a77d19ab4
  • SSDEEP 24576:N9/4GdTIpqghJk/OZGWB+tHyblH3LDok0GfeQBY1G7Ul+fGl0fBenwC3FXE2B1G9:N+G9XA+07DxfexHlqGmfBe0aLq
  • TLSH
    T149B5AE13B69284B1F515153004BA9736EB34AE644B349B8BB79CFCAD3F327A0992731D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2