Extracted

• • Target
    2026-08-08_2a430e672d5192a64d5c2e3dadbdb8df_elex_redline-stealer_rhadamanthys_smoke-loader_stop_wapomi
  • Size 80KB
  • SHA256 9c2f7df3fc2902001de42d6338c30ced922fa284ca702e96980789868e2195f3
  • MD5 2a430e672d5192a64d5c2e3dadbdb8df
  • SHA1 68bcd6b4c8327bbd70105400091c1e668508d32e
  • SHA512 c206d2ce34df413aeceb130deb86233ff50d63533530f522ec2417bd3f3f9e38a35b2a99fb0e7c5199c4f63fc04a07f988fdc6cd17c9e070f95cf2762efd688e
  • SSDEEP 1536:Yg/6/tM8NXDjPX0QWlfGMckTQSMGCq2iW7z:Hk3U8kTQ/GCH
  • TLSH
    T1FA838D61B980C073C44A6039441DC7B19F7FBC3126B5C997BB960BBB5F313D1EA2A25A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2