Extracted

• • Target
    2026-08-09_6060e1313378ada62ee384caa520d0dd_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 107KB
  • SHA256 ac172cf33fddc3dd4db04ed55c92e9858ac85a97964de391d47f6d14c6b9d503
  • MD5 6060e1313378ada62ee384caa520d0dd
  • SHA1 3b01d5859e3a49eb90b964bff5f541f921e5a001
  • SHA512 0e1bc20344770881c791afd51d7402bd56382e62c0184b132c0d19ec841825bd7f6db700ab9dfe5d50d6c1b4e570a0a4d53be51f965898a99919c5e481377b39
  • SSDEEP 1536:cAVyL1OPtQ9mVB2ccN4EM/7au6ZKbeobtBUIloFfHYToxs08GCq2iW7z:cAVsl9mzB2uJNGIlSfHYToiGCH
  • TLSH
    T1B0B39E51B781C076D06A24354C6EC2B20A7EBC3295B9858BB7D47B3F1E71380AD7A71B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2