Extracted

• • Target
    2026-10-17_fa91afb692cd03c3a4691b13bf0a58ec_darkgate_elex_gcleaner_smoke-loader_wapomi
  • Size 537KB
  • SHA256 c82dd528292aa5de153f59019dd0c1835d5fa7aaeec7c07a3a31673ceb799628
  • MD5 fa91afb692cd03c3a4691b13bf0a58ec
  • SHA1 5069ddac1ca71bac176c34809233c6ad15f5b100
  • SHA512 e4ecc2f8a6fcc21ec3300d1dfc7c66196634f9ce777d6e2a44e434372443bd258cadc47b62090163d8aa1637912c40172a4fbc647ed7687ac81e54980a3f7759
  • SSDEEP 12288:+L8ozML5h8Sxm1IzGUG+v2+7g7QYvQf4gzv4gj:kAf8Sxm1ISUZv2+CLvQBjf
  • TLSH
    T100C49F71F6D18537D1272B789C1B92A99C39BF112E2864476BF82D4C8F397C138292E7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2