Extracted

• • Target
    2026-08-19_9372ff549fdbdf313d0d72199dd6c003_elex_nymaim_rhadamanthys_smoke-loader_wapomi
  • Size 56KB
  • SHA256 7721cd947cfd56948988e5aa6740287678ed60a00aa112689d7e096107dbe895
  • MD5 9372ff549fdbdf313d0d72199dd6c003
  • SHA1 3f9a7e69193da28045e830e56af86219ef438d45
  • SHA512 a66d85cf8a69b434498d3ee1ee5bf85f09192a137a59eb3c1cc1eee904c27b8328b0b314f9f4227248e4ada46b91fb8bd8b60d37a51b7d69d605df091c841a29
  • SSDEEP 768:Jbpo8DXv34JE9W0s9LejvRKRoe7n3QGPL4vzZq2o9W7GsxBbPr:JbitE9W0s9Lewoe7nAGCq2iW7z
  • TLSH
    T10143AF337ED08077C8C9A5B211AB6B56EF3B523046F950C7CB14DC692DB2680BD3E186
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2