Extracted

• • Target
    2026-08-02_58cf56009dacc541bfe26b4c2e117a76_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop_wapomi
  • Size 140KB
  • SHA256 0f6f9c17f7099dc3fe88dbceb6b2e6172d353643ff9411824c7f4d7097c13a97
  • MD5 58cf56009dacc541bfe26b4c2e117a76
  • SHA1 08245b20da636a128f0fabc9ac1c9511f4085b3d
  • SHA512 317827de7474322538733999a9ce0a141048e73981486b0dbfbe650eafbc2be324b71d997808cf050e5c16b7dbef7eba2a1656b302df47e08e0caf70c2388370
  • SSDEEP 1536:RuolLnntaLu8UXdfBR03B27dNuSjHGqzlylb65FHopA0HGCq2iW7z:Ru0IL+8KdNK/l65FHopAiGCH
  • TLSH
    T150E328127640C475F3590B305919FAE0496AAD3C1AE5E18FF6787E3A2E712C39A3724F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2