Extracted

• • Target
    2026-08-02_053631fa77e774c2348c5a15e97ad746_elex_mafia_rhadamanthys_smoke-loader_stealc_tofsee_wapomi
  • Size 187KB
  • SHA256 2f5107208e4d5e2b69da950cbcbddd23c0fe21d51ffc03d73f7c21487f101048
  • MD5 053631fa77e774c2348c5a15e97ad746
  • SHA1 a361e1430cf60a24e71b70f4bd2e69b7ba1911d8
  • SHA512 d87b24c3bf200c022b28ca720f4fc32761030bbded10fe8a02be8bb5b15590e7fccad24d2474bfb6726757c2b738c100c2bd6aa40ff13d4561ada0c63a514c38
  • SSDEEP 3072:tLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6d4n3meIOuGCH:z83YLmUOFXEEZnRCI3AXny/Hj8LG4ujy
  • TLSH
    T110148D3536D0C072D493253445A5C7B14EBE7C723362A89FBBED0AB99F246D0A63839D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2