Extracted

• • Target
    2026-08-21_75beb3d1b75d9e6b927e0415c7189e3f_darkgate_elex_gcleaner_smoke-loader_wapomi
  • Size 538KB
  • SHA256 27ace4b8d30c5d02cab2f0935c6e4e435d7beea3a667a8d970d8152295fec17a
  • MD5 75beb3d1b75d9e6b927e0415c7189e3f
  • SHA1 0ac08b3c08366f57731cd32bdbede5bc47126bad
  • SHA512 0019555210867223dc706385f8d77bfb387baafb0238bd3acf8378f143226440c7e96841166f7ea927c9bc818cb2385a0d81e62051dc1efd34cfd339e2112f44
  • SSDEEP 12288:xcMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUxjV:KZyCA8CBmn+RrNj9ay5G
  • TLSH
    T1B9C49F72F7D09537D1271B788C1BA2A998397F102E2864467BE82D4C9F3D7C139292E7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2