Extracted

• • Target
    2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi
  • Size 104KB
  • SHA256 de763e80d597c590e8b6af93d2c0b41d9a929d42008ed78f75e1426e74635ca1
  • MD5 73db567bae2d2dbe90e276535001b89d
  • SHA1 b70d0736b1cd9f548a34084184e533e60a47982e
  • SHA512 cf5fe159230ea8bda9b03122655cd5b3454b13e5e347a45595e3db13de4a78e9031871873838fef8adcf7e7c2f9ee2d3a2ee4303e76ea256c954126961f3e6de
  • SSDEEP 1536:3C/uy9/ra8NNqQbYOQ2RSL08njwq2aPln8ffBGCq2iW7z:yJ9/rRNgOQ2EArZaPlncZGCH
  • TLSH
    T147A37D17B2F8D071D07213F448A59EAA6A7E78112E7049CB27EC17BA1E703C0697979F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2