Extracted

• • Target
    2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
  • Size 205KB
  • SHA256 956a61e891bac28fe04658bb33eab4e93228ad1d3049b2c7d66923411225940b
  • MD5 c0d18d996c7fc0148a92e0d31068a6cf
  • SHA1 fb829b76d4b4344731294fa2ba0b5f06a5ef4b36
  • SHA512 3f9141eb1bc1f160b85c8a09dab259f080cefadb0c04981af5af452ef1e7849e81ca9c95cf6bc378a80f57ef009c79c0801b3a321ca3ae3efd1cc1e167b7443a
  • SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQ0GCH:SZgyrqdWjibwrEULieF66u/40seJ
  • TLSH
    T1C6246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00B7D5F306919A2835B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2