Extracted

• • Target
    2026-08-02_640ca9af9c729e3caff8278e5ae1b00c_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
  • Size 205KB
  • SHA256 4ba8c875b8e50f59c73b644fd02fad49152debea3d754d5dac43ba01d36000e7
  • MD5 640ca9af9c729e3caff8278e5ae1b00c
  • SHA1 237630d44ac263340c969a72e73f206d0ac77973
  • SHA512 5f35c2f3ead0c014f65e854e41eeba646bfb8332a472c4a0e1e376b166f82c9b91df21d4d6d8bfd2c9b9b301dc3e12a29b060a772a372bf08ac19136c0109831
  • SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQpGCH:SZgyrqdWjibwrEULieF66u/40ses
  • TLSH
    T1BF246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00B7D5F306919A2835B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2