Extracted

• • Target
    2026-08-18_2cfabf8fc63d25c7031cabf65e51f378_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_smoke-loader_wapomi
  • Size 3.0MB
  • SHA256 e6556a95e9be7b6afbc1fb066c70ef1ac916ddec07e70be8691fd1561c5adfb7
  • MD5 2cfabf8fc63d25c7031cabf65e51f378
  • SHA1 53d85721b3c804ad8c1f5e6f99c022fd959a9f8d
  • SHA512 72cc6c2b40689326d699c6148653bc8be3b18ad5625c5f74e4a0bd08a491ef4e503cb1823126759544ba7afe3d9e4ca02f8c650d7dc7e6b400b94f4f824a76bb
  • SSDEEP 49152:r1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgN3T30UNJqjkZOWX:qnCG4h7FiRA7WkAbJ0rCmIZDoNJT
  • TLSH
    T141E58C217EB1D423C4630631496AF63D316DBD603B34CDC7638B3A4C293BAE16A3A657
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2