Extracted

• • Target
    2026-08-08_862848d7c064c8c296f0550663997217_elex_emotet_nymaim_rhadamanthys_smoke-loader_wapomi
  • Size 120KB
  • SHA256 db007256f974410925b903e551bb69191bc749d18180eedfa8b481736da5469f
  • MD5 862848d7c064c8c296f0550663997217
  • SHA1 a1eed7e54d4502baa3bba60f069334d0667789de
  • SHA512 47a64ea08a3f31156e6a953c7f62441d5a07ccad19f13e1c89abc85bc1217a665050e77148f75370299842035b154e5cca0a398671683efedee49beb377d8e70
  • SSDEEP 1536:Eysro+bGVJiyTAWp39PK406TWUrw+7wV13TmZ2Vyp5huvmoz6K2SJHvkfRJ8GCqm:EysXaVyWptiN66AoTQoz6x0HvksGCH
  • TLSH
    T1A0C3AE12B6E1CCF7D09610324E915B79E3B9EA306B335F1373589B4E2D386428E1B366
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2