Extracted

• • Target
    2026-08-10_a32361dd2d3b7fdef3dd2d5d451908e8_elex_rhadamanthys_smoke-loader_wapomi
  • Size 60KB
  • SHA256 e17932e922f617e9215417575c24a770f39e11eeba96e9f96b2a91f7ee85ef47
  • MD5 a32361dd2d3b7fdef3dd2d5d451908e8
  • SHA1 90b029269ac62ca58a0b65cbbcf8332efbf30abd
  • SHA512 9fe6fba1128c34ce9dbff482d6517994a9faf91782e4ccce5e3875efed3e1a65134223755178c24c990ec8cf2ca8050cc303bda8393b7d8c1df024d9e290163a
  • SSDEEP 768:ya1qGZIyiZjaflAkOCpwjWviZKB7JD6eI2QGPL4vzZq2o9W7GsxBbPr:ya1jZCZj83Hpwav4KDD/8GCq2iW7z
  • TLSH
    T10C53BF237ED080B3C8CAA6B141995B87EB3B551407B591E39F644C5ABF637C0AE3A346
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2