Extracted

• • Target
    2026-08-17_2057707e72dac434f61f225d8753b190_elex_rhadamanthys_smoke-loader_wapomi
  • Size 72KB
  • SHA256 d52e81f2f0e6c23e5f97ae44b3074bae8c51c782f14d0253be6ad78bbb99155c
  • MD5 2057707e72dac434f61f225d8753b190
  • SHA1 6303c99f0bf9e929dab0ad43b9695bfc35f1f22d
  • SHA512 4499ab9415d9f2502ac97232c69847aba6eba88a1254e2f4de3514d6abb5309e3389d98f4300113e2e7e5f55f655ded35d7386389880b958aca7b35401e1950c
  • SSDEEP 1536:fV+Fjw+Qn60LO+/8SzzY9k0QA7lt2hGCq2iW7z:t+9in0c5A7ltWGCH
  • TLSH
    T18973AF23BCC1C573CC45657108694B0AA777D6200BF15AD7BFA4198EAEB23D05E363D6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2