Extracted

• • Target

    2025-04-07_de12ab59f208b6caaddf0ee9d120ea6e_rhadamanthys_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    de12ab59f208b6caaddf0ee9d120ea6e

  • SHA1

    33b9a9d73bfbadd1b7f7421a72fd6c53576833b9

  • SHA256

    c6585e36a911f46f159985804f588b517adfba6ed10c15ddb7f13fa0c1b6e66b

  • SHA512

    8bf48ae2e6a7bd6b6aa69eea0b97b26dab017c6596d5b4401eee58c25ab3edd719841c956bb16b4cdb8769e73bd04917de22107a3fa47c7073b2c59a4211e9f3

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ5VGCq2iW7z:Y3ysTGhQ3GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1