Extracted

• • Target
    2026-08-05_03dec73e83ed1a9d46ec4d232ede934a_elex_rhadamanthys_smoke-loader_stop_tofsee_wapomi
  • Size 208KB
  • SHA256 7e5e0daf4aad38fcdf8c8b463893892c5c25ab1c67614355457f1be97ddedf6a
  • MD5 03dec73e83ed1a9d46ec4d232ede934a
  • SHA1 71f8829453e8a9af88afd7fbe0c867a5a5199060
  • SHA512 a18c516ab4896a16fa69df907223b8434ca0a120c4f9cdf974b3769d4244936d3f95acca6fc258d9a0304b494094c05150113459dcb95520cf8777261f95fa2c
  • SSDEEP 3072:LW8KaJvnsgaSIwi/cJimz+zQzBYTBf9pAXAZPuYQOPGCH:Qkv1IHyz+zQeTBl2Muy+
  • TLSH
    T164248C2072C0C073C063247641B5C7F59EBB78755A65AA8BBBCB1FB90F252D2DA2934D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2