Extracted

• • Target
    2026-07-07_cb968e66121cfaa1dbdd880b4cd46be2_darkgate_elex_rhadamanthys_silence_smoke-loader_wapomi
  • Size 557KB
  • SHA256 485148e12deb1e0b5076914090873493f98ab18d0823a93b1380f24121abbf51
  • MD5 cb968e66121cfaa1dbdd880b4cd46be2
  • SHA1 33cb6927a4c083e604c5bc1f2599d015c3dc7bf4
  • SHA512 78b6436a9a01d4b867c5f0a4ad8da59f8f4ca193661d0de97fef69fa71e8b156dc531322d56f70a226c59582dc1763d6de1d341fb5230490abcad15aa49f0925
  • SSDEEP 12288:ow67q3bHoA43r/Og9nZCIBXhgJ9u8tJfE0WLoO2ydwNWEC:oc3Tov7NCNRC
  • TLSH
    T10BC4BE5176F1D071C87280F6447BA72585FDB8204B6396D7F7C82A6E6F708C2A3376A2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecadwarepersistencespyware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2