Extracted

• • Target
    2026-09-03_cd3040a0008b9006895628078994d983_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader_wapomi
  • Size 381KB
  • SHA256 be17638e9ea3f653fbb35fc7155359d01a87e9d4c5bef90de628fc831c2e82de
  • MD5 cd3040a0008b9006895628078994d983
  • SHA1 a822fe9a9ead1806665a08a8b9ae4cda48be6fa1
  • SHA512 62636e17e9765911bc8055bcf56082380fa155f3882ca5a15236578945044612324d202c869adf5246db2201b0af114c9e9a0d0475f004a09416015f771ed13b
  • SSDEEP 6144:hhCNnXXVDa1eaWFzhAbQA7uCfzYOO2xltdlaA6ypj4nmJPYts0FXLb7UHiEneCcN:hh8n1Da1zWFzhAbQA7uCfzYOO2xltdls
  • TLSH
    T18F847C11F840E032D5A20570E6A5DAF3492CAD71EB1594C7F3D07DBA7A309E1A73DB2A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2