Extracted

• • Target
    2026-08-10_77b615ea829dc37be99305a1604dd4bb_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi
  • Size 848KB
  • SHA256 0cdfaabcb064993845552bdd3189c93134a58540a08e1c4f05c09b3018e7798d
  • MD5 77b615ea829dc37be99305a1604dd4bb
  • SHA1 aeb7752baa24c651256af555482162e3dedc2f29
  • SHA512 295dd4f0107ce9778fb8ee4432d3d0823ffc5a4cd42e885bcec33da690298781798ce434f9a1f8da1d716ccf5d9d2dc62b67c6801ac520ef6c046aeba9319408
  • SSDEEP 12288:jiOm9Puii4uuBQKOyhBW0FL8I7OVt9Bhgi:hmBW0FL8I7OD3d
  • TLSH
    T14A050801BBB15019F9FB16FA86FF706C9A3DB9E01718A4C752C02AED9625AF07C31617
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2