Extracted

• • Target
    2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi
  • Size 7.2MB
  • SHA256 33e3174dcea993093a7b97db6cc2d3328daea19268fdabd7a2203123265add62
  • MD5 715617faf9b8fa6c3d450e9327eac0b2
  • SHA1 235fb0457d37456b830a3649dde2a46e38df9146
  • SHA512 c3a80b80e792f3885e0b26ad6ae05d34796dd2ce19b2c02471c6b8c0d64821e2110da3e412db0eba1b02e5737b4417204636fa9afce38f202285d5cf62ea4ae3
  • SSDEEP 196608:BiYRla/5rvEscuS8KSir6QGz0HshnybNSCIeG8GTBb7weS+esoYM:25rnGIeG8GTBbteH
  • TLSH
    T11B76BE10F991E022E4E101B156AEB7E615783F350F2085E767803BBE7DB4AD3993276B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2