Extracted

• • Target
    2026-08-08_f3d3eee192b7b7fe73ecd5d70fccd5ca_amadey_elex_remcos_rhadamanthys_smoke-loader_stop_wapomi
  • Size 1.0MB
  • SHA256 0212431d4e0b25001dfe8a428d45b19ab2150f98040172c303c66f3501231f16
  • MD5 f3d3eee192b7b7fe73ecd5d70fccd5ca
  • SHA1 d8b0c4e73a7f4a19f7c492336d16b7f817259672
  • SHA512 bac7980192614c9e7b6ca9c0695dd0b15accc6efb027940d0a9901ee5db9e9d90cf217cb6b7b2dea442ef40b362b8e0a9fa6928d501619d83e59ed46217d3ff5
  • SSDEEP 24576:SSSfYNhFW/Y+eePv/QnrW6hoHi4cP1d1BrOfO:sfYbFWkePXQnrnii4urOfO
  • TLSH
    T1BC35E011BB91D072C26231764E97E335A6BDAD609B2142C7B7D42F2D6E302E1AD3934F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2