Extracted

• • Target
    2026-07-27_b9ea252d1715818257158f15bc750201_elex_rhadamanthys_smoke-loader_wapomi
  • Size 76KB
  • SHA256 766d1b693d80a8a4aca2dbebd3b9224180cb18d259ed6fc0f89a37ed1c090d77
  • MD5 b9ea252d1715818257158f15bc750201
  • SHA1 fa98053f7065c55d023c8d5865803a8bc5cbec5d
  • SHA512 0906ac2636e4f564108eb99a1313943e09f72ff2acfd7ab86b6338fc86a90352723897d0b6ff2beafe959bff003a2ce5c8ae3f3fe8bcde3411e4ff2450760761
  • SSDEEP 1536:/FC3XSePcoacQueMukcpkxu7ZU/0KKcWnKGCq2iW7z:/89PcotGCH
  • TLSH
    T1CC73AF32EFD0C0B7CCC555B140B65B1BAF3FA572C2A1969787949C2E2E33991ED36142
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2