Extracted

• • Target
    2026-09-03_4b717d7aaee1ac856cadadef51b180ce_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader_wapomi
  • Size 90KB
  • SHA256 51c431b20208652ba58247e7502d1890628787a725c1241d802a7892bbdbbe55
  • MD5 4b717d7aaee1ac856cadadef51b180ce
  • SHA1 2f9532bb243ddad4cf2bc26e4740b2489786cbe6
  • SHA512 704f0e00202aedacd99dafbbe51abf548f4dabf77c378a0eb81179f19acf2af0a9e391624a6cfa76e0f541a9829a4444165553b90b9e0db216467275d2d3571a
  • SSDEEP 1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaObGCq2iW7z:ov1/G5+L1C6cGCH
  • TLSH
    T1C5938D13B6D080B0E4A3173104A49B620A7FFD366A74DD5B7788020F1AB56E0DE7AB77
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2