Extracted

• • Target
    2026-08-03_296be12767184aab34f5c1e244c0a63c_elex_rhadamanthys_smoke-loader_wapomi
  • Size 76KB
  • SHA256 206721e24cb7976713cefcc7bf6b527a4ae961326a09f0126cc69ce2b92f47e3
  • MD5 296be12767184aab34f5c1e244c0a63c
  • SHA1 c32803019e5b4254006adcad88953092105208f8
  • SHA512 38d6d30c70e208ecb45147510415fdebf12a438bad6954965ae499259939c219e325431b93ef78110e26bab9c05fdba119a953f3da26d87071f464a231258241
  • SSDEEP 768:i8AcstBy9afhyO45SqNf/mmjVrqvn84Bhbrqtuvq2QGPL4vzZq2o9W7GsxBbPr:i5csny9TVheqhQn8Igt+qtGCq2iW7z
  • TLSH
    T132739E1339C24473C8D95AF051F71B77DB3B5AB11270D95B8B608C6A2C71A61EA3A38B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2