Extracted

• • Target

    2025-04-14_1f9c345b226966738218511317d8552c_amadey_elex_rhadamanthys_sakula_smoke-loader_wapomi

  • Size

    125KB

  • MD5

    1f9c345b226966738218511317d8552c

  • SHA1

    f627bb455d83658743e73b1e4eeb2c58cb055546

  • SHA256

    6e06ac57e759beff9bb5636ae5d1e9e96b4b922071490de4e9a571f272aba9df

  • SHA512

    d34216ba579f6dc1fa52e8c290b2dae7b7785d5d1edecd6953daaf061f7ab3d8ce338e2c885d18240e2fe0e7ac4b90ab75dd03d573a3d98bad3f6fbe49035cab

  • SSDEEP

    1536:V8cRe9po9Me2JBAnTJTfla11vg7X2X2L+8JiYQM8ohdpr6v++wukg9iGCq2iW7z:er9nJBcflaEJia/6v++19AGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1