Extracted

• • Target
    2026-08-09_224d4557f3c6f39ae02218684234dabd_amadey_elex_rhadamanthys_sakula_smoke-loader_stealc_stop_wapomi
  • Size 125KB
  • SHA256 49f3c74a9c28f42dc1a56a235457b70ada0b44b103db3d7c9812e6662586ef99
  • MD5 224d4557f3c6f39ae02218684234dabd
  • SHA1 f6fb5ebf86fdeeec666134e2f2bb9acd2e57f73a
  • SHA512 cc502f81cabdfbad61ddeffe9a7ced00bdba86b35baf933dbd0a40e9ee7144a7055a0e903fc322040ce5362538815820731a5c3e4912da0d36fb1e0f886c01c1
  • SSDEEP 1536:V8cRe9po9Me2JBAnTJTfla11vg7X2X2L+8JiYQM8ohdpr6v++wukgPSGCq2iW7z:er9nJBcflaEJia/6v++19qGCH
  • TLSH
    T1A2C37C0172C1C072D056247B8516C7F14EAF78766866AE8FBFC60AF90F39792DA2930D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2