Extracted

• • Target
    2026-07-10_d4c9594294c6ec389e32d47ac59dd23e_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi
  • Size 32.6MB
  • SHA256 0bd27066ee8499ca6a5ad00837f103a2aab76d500405107d04c7f5861a380f3d
  • MD5 d4c9594294c6ec389e32d47ac59dd23e
  • SHA1 63b32fade97d90abf33ccc8439fc86f876c00ce2
  • SHA512 bafdc7d9b9cf3f0115737d918494c15fb39532a6b0963ab43abdda08ba23f9d3f040136c9d2869d756e85e8b41d28c7adb1dd77a896a1f3ed87eb171bc822b4a
  • SSDEEP 786432:pxSGhDSNESwjGivU44UnZjW9ACajPw0A63ib/DDo9k:2WGR44iK9ACajPBR3ib/Q
  • TLSH
    T1C87733803A94C6B3D455033550579B82BFE69C45F918CF0E72C2B0B93EF66998A772CB
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecransomware

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2