Extracted

• • Target
    2026-08-20_8b4c3f2924a157fe6e027eb3592fc953_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_wapomi
  • Size 146KB
  • SHA256 f3308bcb61aa9065762a29df3d5a3fc179612c10cd6d66218cb3d6e129368e99
  • MD5 8b4c3f2924a157fe6e027eb3592fc953
  • SHA1 7987fd23c9ec1186d85ef6e9b0bbcc0f48c29c59
  • SHA512 660c490b86a9f930d80378ab95f9de240653840e7327f10e06d54c69ca13345251a67ee6efbbcffa8e724cec979bf60c81053538f5945c2888279895023bb66f
  • SSDEEP 1536:eHmVWA+TsLbuHs3c1JsxB1gLBbqQok7TsUpIuwPBWc5WEaO4EaO8PGCq2iW7z:ZT+T3Hmt1Kdok74uWWc5WjJjLGCH
  • TLSH
    T1BCE33921B6A0D4B3C4080934855AD6B17B35BC701B259683BBE47E7FBEB03C3592B68D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2