Extracted

• • Target
    2026-08-25_ebc38192efbb57b9eac0c6f4ed6b5ad2_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 112KB
  • SHA256 500157bed364169d2216a132d355d22ccfb85d53b3ec1b2fb9bd956d91c2723e
  • MD5 ebc38192efbb57b9eac0c6f4ed6b5ad2
  • SHA1 5dd8ac60c9a025e97cee37167202567511eec210
  • SHA512 fb4070bd40908d2893ce4d06f199bc18d50f21a5c9a6664e3e6686b22ec4d5541eb479b9fe635c0ceb330a342921312664eff5d150028adad5cc318aa8be6ae3
  • SSDEEP 1536:aogtezQFW6GRGiJoOuqSyEQax/wGJKq1Kd0hT7LbMLitTIzU92FfHYTo7WQGCq2d:aobLh1JFWQaP1pT7kc39wfHYTo7HGCH
  • TLSH
    T1C8B39E217390D0BAF45624305D2AC3724A7EBC3185B9898B73D47B3E1E713C1AA7AB57
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2