Extracted

• • Target
    2026-08-16_06ca111beb41a708a74678bac6057983_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
  • Size 450KB
  • SHA256 b79d9dbb0846b0725e5b3a9308ecb4362d7e7ae7d9c6bed7b6a094ff489886af
  • MD5 06ca111beb41a708a74678bac6057983
  • SHA1 d9fa527cbe19182482ab4b827358a794ad710dc8
  • SHA512 17bdf43f630b7d8c114b97f181825b6f5b0f8899f91fa9aa95db0c5b3b1e82c5921be5790a9c1204aba01d83b496e9e759a3f3a04c32387de5b4824a3f73641a
  • SSDEEP 6144:VN0G5iYapIHS62okuQTa9rZ4oB3tl2BpuwhrubPJTC1+WxObKBita32N+nk:oG5iYhy62FuHtt4Qj4dxObKwtZ+n
  • TLSH
    T134A4D0217781C473E25A493948E6D77AAABEB8311FA521C3F7401F7D9F313C15A3928A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2