Extracted

• • Target
    2026-08-19_8667378514078cb51860904af194c2f2_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil_smoke-loader_wapomi
  • Size 19.0MB
  • SHA256 91e6ccb1a659a2a003e1664281d1a4f7710ffb93251641cc544906fcdeeb00bb
  • MD5 8667378514078cb51860904af194c2f2
  • SHA1 0cae141c5e5d49bfde6a9c13542f42aebe3999c8
  • SHA512 57ab2a1101eba51036910e6b1325a7e895e755f0767e717c5974818c2a3d7159a02d5b92daa0827dd08fe05216334cadca93b9379f2d10bfdfde3168eaae02db
  • SSDEEP 393216:Z269ATMlkr0AagEaNwBUgCEjeAplQUNAOfnMbxO7tJsv6tWKFdu9CjF9:aagtwBXCY8UNAO/939
  • TLSH
    T1EC17E123B6818079D5720270C95EBBA9C3AEE9340B7546C733882FDD6E706D2793B647
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Windows executables referencing non-Windows User-Agents

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2