Extracted

• • Target
    2026-08-05_c18b594f914af5a24c01c08609115346_elex_luca-stealer_njrat_remcos_smoke-loader_wapomi
  • Size 113KB
  • SHA256 774e1ed6557b12e270026648e0d1e082ecda2cee1a81e99d036f659492420b60
  • MD5 c18b594f914af5a24c01c08609115346
  • SHA1 09b793f514b4e4c690ecd2d8fbf7fceb77e67e96
  • SHA512 5ea1ca11a8c91ae53b44e18642aa38efccb0eb2a726d522a00e491962bf48aa372733307be49f1a7226e316339d58cc44583b730d1699223ef843b745345131d
  • SSDEEP 3072:cJ8YGDuaw4H0YHiboxUnKZ5h7c1gPUazSGCH:M8H7A0gSjtz
  • TLSH
    T14BB39D12B5C1C432C4B32D360874DAB24B6DFA304E699ABF63D8153A4FB41D1A93AD77
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2