Extracted

• • Target
    2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi
  • Size 88KB
  • SHA256 bfff12352130d490d89041d7bdcea0af3981834daf943b66932e773a42dd4501
  • MD5 f35e9b03e5e7f10b89ec95af3880c5d3
  • SHA1 47a784e9ddaee3e7ebbebc3f69e9faae948661fb
  • SHA512 c0e37d6899c92a4370fe69db24ba8ca8c15a7206e5829186b6745b068cc1f1fa9b5f7cddd9c3d1cdab42484b20309dca4cb57047adfc9ef703d5fdc4f9865f87
  • SSDEEP 1536:uJvdezw+O3FEsLJErMKlZjaBER4rLs1YLLGCq2iW7z:uJvdezwVoMKlxlRMYYfGCH
  • TLSH
    T153939E3269D0D87BC491457180A9AE1BA73B9C104BB08687BB987D5FBF333D3A936315
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2