Extracted

• • Target
    2026-09-10_dc2dc0b65fdc6f68ca08d278ec71572d_elex_redline-stealer_rhadamanthys_smoke-loader_stop_wapomi
  • Size 80KB
  • SHA256 ef58ce2bcc1c06e36175aa785ccc0b48d22ef621da5e3c3ba4a5b6755c7be0a2
  • MD5 dc2dc0b65fdc6f68ca08d278ec71572d
  • SHA1 9dc9e4953b8f21384199dbfe395679c486c01db5
  • SHA512 fa09ee1e75722d346c61b03b80154d501aa38a4e0c546dd14d15a70107c0c72b0758e39a38a4e53293c0c11858a04f7408a428fcc3119e91602cde58a2a39e96
  • SSDEEP 1536:RfnLq01weW5yX3jFxv49Nu4GhQq3GCq2iW7z:Y3ysTGhQwGCH
  • TLSH
    T1D3839E61B980C073C44A2076441DC7B19F7BBC3126B5D997BB960FBB5F313D1EA2A24A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2