Extracted

• • Target
    2026-04-20_cc2a626a3b7277b91d5288166514150b_amadey_elex_rhadamanthys_smoke-loader_wapomi
  • Size 96KB
  • SHA256 75ef1ce1652b5676b0501d8c96a7641c97bdc10a20d98192f7c6a9fc71ad535c
  • MD5 cc2a626a3b7277b91d5288166514150b
  • SHA1 835dd90062cece60f0fd65919dbdabe3d967d707
  • SHA512 d0cbd484da3a88103dca7a61f1da67dc9ce155dbda5f08b1b5a6dc9707b6972c79d0a6d07a6385e785978bc2c0222e63d020ac34286fe5f423d02cfecfe11010
  • SSDEEP 1536:FF7ri1vJT9MSm4hjRCFXJqJKp86tsHIiGqJBYlRvdsqdfjGkiGCq2iW7z:X7m1v19vhSqFPJSlFl8GCH
  • TLSH
    T117A39D33F9D28CB3C39348B042A95B416A77EE32177A68F38790798A4E752D1E539317
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2