Extracted

• • Target
    2026-08-06_cd5a5fbef418d601d1b38e9ee2326d4e_elex_rhadamanthys_smoke-loader_wapomi
  • Size 2.6MB
  • SHA256 60d0b08764c2f4cc323b148ff361e0fccaf6ab7c35ece7da8b0ede7a57890591
  • MD5 cd5a5fbef418d601d1b38e9ee2326d4e
  • SHA1 f3a5a87602d98168ed1c426ddfa44f9e8ce6779d
  • SHA512 7180d27be9f664d50683e33e111b360a9ac910cd8989e62fd4ea3ddd4d78fafa583f9db78b5b127fc30ad6d17f33f546ad13eb929c8801bcca24d8630213ed4f
  • SSDEEP 49152:6FNm8Lg04Yu49q81JBJJS2HpBysubknAEMJs5K3qJ3oOg0Hkkb8j54:6FNm8Lgd4w8JJJSgxuonAEVMO3JPb6
  • TLSH
    T10DD53356B94BC0E5D3E1C07B95120F54DC22BC234527852FFB4E3EB5CFA24687E25AA2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2