Extracted

• • Target
    2026-08-14_4faf90234debeee4eb2f9175cf478c80_elex_rhadamanthys_smoke-loader_stop_tofsee_wapomi
  • Size 167KB
  • SHA256 2c1ecd3cefff7b207fabb29a8a610e33b3fab39bd24537fb3696cc058c8cd633
  • MD5 4faf90234debeee4eb2f9175cf478c80
  • SHA1 bf1bfdd3388a62b684787734fbd7b0cf2444730d
  • SHA512 8496c293bf27c85dc4e431dcb1a2ceb99e6fd75117350692c4e002cdafee2e4a59a87eda3e90b3d0fc85ade9a77d709e9089c89b95d0e708a1173ebbed464ebd
  • SSDEEP 3072:CuS4u+u4Jpq0i9X/ToqoWeYvrrr6BIS5/R7nF5GCH:nS4uJEERT7ZnX2BIsRi
  • TLSH
    T1BBF3AC2135C0C0B3D587107948A5CBB5AA79B8710B3559DBBBC50BBE6F253E28E39387
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2