Extracted

• • Target
    2026-08-18_13e3134cf337df3c4a971dc32ba3c43f_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi
  • Size 64KB
  • SHA256 44f02912e6c0106e694382eceec5132cdb9264685319b1eb1e4658b96e3346bc
  • MD5 13e3134cf337df3c4a971dc32ba3c43f
  • SHA1 a819dd6b4e7009e125e4ba46428416fbb470a6ef
  • SHA512 3d5c9dcb1b21305a6979d36b52f3bf8def7a38f7fef731d9535050fd6d9962eac59ee093e5f4c0d57acaf9a172de98dffb3469e1404cdd2b2f5e4558c2aefbd5
  • SSDEEP 768:lDnA2K5pacxDyHj9yNnPJYLjb+Zf4EttdQGPL4vzZq2o9W7GsxBbPr:qaRZanPD/ttqGCq2iW7z
  • TLSH
    T16553AE5338D1C473C40A42FA045ACB42AB3B6D21ABB584873BE8428E9F327D49D3F349
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2