Extracted

• • Target
    2026-08-14_e1b67845c3f1d2e1aaed34374fd40776_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_wapomi
  • Size 146KB
  • SHA256 11e74053a45876f36b354aee0e1300a947a319481bba76955c819025dde77d86
  • MD5 e1b67845c3f1d2e1aaed34374fd40776
  • SHA1 1ba8f966dd0d56181bc2010ab34d9318112fea16
  • SHA512 22dae5f1a3be125ea2ff1947a7c7f74f8561e81b0f7301c8deb368b81abc057374a79982d9b9fe447b46d2559cfea65ca0e61b599ba267604cce739f436a23be
  • SSDEEP 1536:eHmVWA+TsLbuHs3c1JsxB1gLBbqQok7TsUpIuwPBWc5WEaO4EaOXVGCq2iW7z:ZT+T3Hmt1Kdok74uWWc5WjJjAGCH
  • TLSH
    T1B8E33921B6A0D4B3C4080934855AD6B17B35BC701B259683BBE47E7FBEB03C3592B68D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2