Extracted

• • Target
    2026-08-27_c2bcda7235a1423a70118efb048b0cd8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_wapomi
  • Size 152KB
  • SHA256 35685df71b85d57dfef987824f9e5f330c6273d3e13f1f9fc643e84259427e45
  • MD5 c2bcda7235a1423a70118efb048b0cd8
  • SHA1 20293c541ad4bd04e361e040b6aaf260b5045ca6
  • SHA512 b16234cd59a6caf0e189e818e866afbe43ed7e965e29096a61e147f6a0afa3ac38475f2f52341f57642d35e01179303940d95e530b7441e4518406574cb57719
  • SSDEEP 1536:IU7TRrlQRGTvRFIPe0CjEty50sz5/klcRPIv+rcDgv5lEaO4EaOvkGCq2iW7z:X7TcEt0wL5Vz50caWoDgv5ljJjZGCH
  • TLSH
    T170E33921B6A0D0B7C4040534946AD7B17A36BC711B2896C37AF43F6BBE713D3593A68E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2