Extracted

• • Target
    2026-08-31_ade877f084d4cde2ea4d01c4fb9a6407_elex_emotet_icedid_rhadamanthys_smoke-loader_wapomi
  • Size 232KB
  • SHA256 23581cb4e5e3664622f9d2f589fe5fada02f596a8b0067a5d0227deacd92868f
  • MD5 ade877f084d4cde2ea4d01c4fb9a6407
  • SHA1 06a245104c2bbfc5c95655f8412c825a682cdd03
  • SHA512 40b729351693086c031f555b88afbbfb731284a03ba9a65c9db94f17d899cc1faa93516d46a8b2db4a0e54682f5844a91672bf31f4da20609bcc99bb9db514c9
  • SSDEEP 3072:FUZfBMGm/7T9XKepFYtpSFOx5ADEpJ3uMIRryY7h57v5kFIv0BepilmYA5qzGCH:EfqGm/TYtUcxGDaFIJyYLBDCzAUq
  • TLSH
    T18F348D2376D1C0B7C5A321B04EE2DBB9B3B6FC644F72860363983B0D5F756C2962A255
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2