Extracted

• • Target
    2026-08-21_c5f0f0ed38abe2f7eba3b432f1648f4a_elex_nymaim_rhadamanthys_smoke-loader_wapomi
  • Size 88KB
  • SHA256 f886df8594669e51ed7757d73d27a857e55294bc231c78bdf20fc05549cd726a
  • MD5 c5f0f0ed38abe2f7eba3b432f1648f4a
  • SHA1 ffbe98cca71cf0123f8852b385c71eaf89a483eb
  • SHA512 82e924cb3f7b9fa5946cb934f1acda5b5903fd35e94f6aba236d57ababbaa0e8b940633471deb5ee1935a57e4c5bd9363fbb6191589226b5015cbe04a2dfe1ac
  • SSDEEP 1536:zf8rczFW55+2yNH6585X3cJQrdiyvlBCf2/QoUoYoVTGCq2iW7z:zf8rl55+HH65KcKcy9UfOQnoYo1GCH
  • TLSH
    T14493CF63B8D1C477D68550725CE5DBBAF7BBFC320E20A583D758692F2E31A808D23592
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2