Extracted

• • Target
    2026-08-18_fe983587d5c3d112e020c8edc86438f1_elex_rhadamanthys_smoke-loader_wapomi
  • Size 96KB
  • SHA256 c11fe97cf4293f758d4cc784785a8a743407d4d1fa7ad85f87d2e72b7861625a
  • MD5 fe983587d5c3d112e020c8edc86438f1
  • SHA1 c58ac43149c9d92d0cb3f13ff29bf2e094c7bda5
  • SHA512 0b29bff8422d5632471554b2a933245147a836bdbf66a3ea4db961379bbd242b43b6172770d2572d5a7d2c4b1543c01e7b7f557c9407caab8089756b203b5c8e
  • SSDEEP 1536:9AK4ugS1kw4JOKAksrGbDFCrRVMmx19c7JKWQ0Glr6kGCq2iW7z:9AKFjAAkbDFCr3yJKtlrHGCH
  • TLSH
    T1EAA3AE73F9D1C4F1D88224B228A9471AAB77E61087B049D39768195FEE763C14E373C6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2