Extracted

• • Target
    2026-08-25_960ce0377f467f293edff1a7627c8445_elex_maze_remcos_smoke-loader_wapomi
  • Size 1.2MB
  • SHA256 6bb76943b7ced9e929d70df18309b6c63f11a2c7b249d9b014cd99eca239f7ac
  • MD5 960ce0377f467f293edff1a7627c8445
  • SHA1 2655fc61714e8ef1fe3bff0a63a075390d8cb87c
  • SHA512 88caa48890a061300a0e35be5d7072e9c247f9e4497146fac9f7fe8656e9881ba1d2097042cfc6610ca412aafe52cdaf25f12cf52675ea140b717b9cc17b67a3
  • SSDEEP 24576:i75KiUKHpTypewTelai7YGKfoTvOTaTvfTXfBxr8R95E/jKQvVj4YpdjYY0td7k9:4aKJTypekiPKQTvOTaTfjBxr8R
  • TLSH
    T11C459D12BE8EE432C563013205F9A70195B878B13D36C16BBFD8463CDDB47816A6F66B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2