Extracted

• • Target
    2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi
  • Size 8.0MB
  • SHA256 c670a3fe647c4e1f35dc438a56c73a0a568edcd198c373e58bd827816fbf2498
  • MD5 155c685c02b1e3e39ef921b0a91063c1
  • SHA1 54cc9c270ae57ec0b6ca1b41e180371877888875
  • SHA512 16f8ced7a015921ebfb69c6215c5e6ec34eb00414f742bd2e2b2d0d5aa1b42a81a64fbd4137c2329a6e31b138dbbf102c92719144e440997e8c5aeb337c3dc49
  • SSDEEP 98304:dyelRIzXKOzAQBZzeJLvRZO2EPV7IDLGh9em1+EBRkkYKbx9qNRaDybJdooqhegX:dyXzXAQ2JL582skD4MEBR5Y8bGCw3F
  • TLSH
    T17686233175D7712BF124A07C46C6F37E8F8DBAEA822B057F548066C62B216517E62C3B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2