Extracted

• • Target
    2026-08-20_65f0a162d1f1397c2d2de122afd7604d_elex_redline-stealer_rhadamanthys_smoke-loader_stop_wapomi
  • Size 80KB
  • SHA256 6fd85698cc676dde48d6fa9b60c02632e1281e4ab17bc7a3feb63d3c94eac297
  • MD5 65f0a162d1f1397c2d2de122afd7604d
  • SHA1 f7d878b55c5be840e23abf962db1bacd727b23de
  • SHA512 09aea359adf0a48c579c69e78a93c9ebbeaf1a72be3dbef24769dd7d5cbc0b7a86522b5beaa3f1d956db711036e6f880778798b46236a1e7792b2f1c7afc080d
  • SSDEEP 1536:RfnLq01weW5yX3jFxv49Nu4GhQ73GCq2iW7z:Y3ysTGhQbGCH
  • TLSH
    T168839E61B980C073C44A1076441DC7B19F7BBC3126B5D997BB960F7B5F313D1EA2A24A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2