Extracted

• • Target
    2026-08-05_78971359e42cf2c652f8a3a7d27bcef9_elex_glassworm_smoke-loader_wapomi
  • Size 34.9MB
  • SHA256 7cb92b220ac697e7f328559ac1fbd837d3a6122e4bded3709c408f504bd4d51b
  • MD5 78971359e42cf2c652f8a3a7d27bcef9
  • SHA1 ce00660bb98fbae9ef6297b64b75b921d5551da4
  • SHA512 4ce7613346b390f45f813c50782961734f7214b63d6153c2c89b580cca1db7576a6e54cdae3fc4f9f0f979c18ffd8c9ade446b4ddaf2802bfe24a38327285a0c
  • SSDEEP 393216:+nAgmm/H9E7YGOiPPuSeRXqOfA5oXd1ubw1HhyroiORYvFn9ezSBpvit:+nAgVFxi3R+crt9l
  • TLSH
    T112877C82EAC795F2E8070C70416BF77F6A306E058020CE76EFD8BB5AFA73B51550A645
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2