Extracted

• • Target
    2026-08-31_892c7a07a1193fe06a8b2fdfb5a571bc_bkransomware_elex_maze_rhadamanthys_smoke-loader_wapomi
  • Size 215KB
  • SHA256 82048c7d19479ad6dfeda6c504f705b7ee6b70022370e63660383e3cba325b32
  • MD5 892c7a07a1193fe06a8b2fdfb5a571bc
  • SHA1 312c68e66bdc2cbec13e56f20853107c57db224e
  • SHA512 6693c858c55db8a100c4c75d35c8e4ccc12914f4c202f319b3be58d570a86f11ca92f58f2f46f302c310c77769bd38cbe90c38b811f672a09f57a41a872b839e
  • SSDEEP 3072:J666SmGgfYMSLpt690G4EHI8FeqvrvuSUdyfQHoAb3MVD+Q3KuGCH:J2SSI60GhHvjv1Q83KH
  • TLSH
    T105248D3275D0C031D8B3027A45E8D7724A7EBE715B368A9BB7EC0A4D56344D0B736BA2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2