Extracted

• • Target
    2026-07-29_2f4704d627f63cf6493cb214c702ee2f_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_wapomi
  • Size 154KB
  • SHA256 9bc6a8620af031a995c3ba268bc08a88429e32cd92e914c1b36954a098b5e2b2
  • MD5 2f4704d627f63cf6493cb214c702ee2f
  • SHA1 0c523a230a5945cc91ee4811d9d495a207ea09cd
  • SHA512 7191b77a06caf6dbcd050cd20c14db83efb832f89ea1c194ac1114d6b7a635d415e9ea8e4fa3d1e1e14cd6da2d4cdedfd71b7dfd4159b6ef9a63fa51643752e4
  • SSDEEP 3072:BWK+I+/wslzo5WwTU6gixJpLOaHIYsrIuPWpGCH:BWK+xZxixJEaoYsB+s
  • TLSH
    T15EF3DF15B990D433C04618355429D7BA6A3DBC323A769647BF942FFF2F213C58A3A389
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2