Extracted

• • Target
    2026-09-16_32d51783f8b0aa43f7a71eaf456d0768_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_wapomi
  • Size 568KB
  • SHA256 b5db0bc18f563e4db7dfa8ddda1fdda25cfe07692b3d51c9362e1d1b8b0ba9a9
  • MD5 32d51783f8b0aa43f7a71eaf456d0768
  • SHA1 73efcdb8921b88bbae5c4490ffd0c7275c45f2b8
  • SHA512 0ec465ef4f4511fd42ddb008bc89010bd709059bec5f5dab91ac70aab3b2769bf514eafff3da9b58474e13bba3dd6ecdd10b73c185f45da31af78817f7617361
  • SSDEEP 12288:4h9c/yB/wJ/Appc7NhgsWrKShVuDu9NRCYF:qKRLhiHXuDuNCa
  • TLSH
    T1D6C45A1237F0C036C262613649A6E7B565AABD609B3597CB3BD02B7E7E301D19E38347
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecstealcstealer

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Detects Stealc stealer Version 3

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2