Extracted

• • Target
    2026-09-08_03d3c8be0d09e47d0bb2950ed9f061e9_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_smoke-loader_wapomi
  • Size 7.3MB
  • SHA256 4e3ef0ebcd4aef0234abc5fa2becee9f3bd2753a7512635d05e6f400ef608138
  • MD5 03d3c8be0d09e47d0bb2950ed9f061e9
  • SHA1 df14b69536ce9741016a0210f137f00dc02b1000
  • SHA512 178cfe1a2bfff9a551d3be76e5c2d1c98cb76c7c254f51d2d9332fb875fff348935346932bf516f30af8af8a82c052181553b0a5967a04d9b253a881a3663d23
  • SSDEEP 98304:bz16s9EwkidrwQwPdz9u/ZZmDZJErFXQbZT7wIX0T:bz16gBrd3gu/XmDZiF0t
  • TLSH
    T11E76F84162D58064F1B32675697A2AB1467B7D215F38C8CFB68C6D1D0BB36D2E830F2B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  adwareaspackv2backdoordiscoveryexecutionbdaejecspyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2