Extracted

• • Target
    2026-09-10_28ac0b787da4f529838a78c093b9b260_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 103KB
  • SHA256 1d87d43bfbf9f7a224bf76655a197accb84da3feaec08d4bbcbfd1b6bcd3e374
  • MD5 28ac0b787da4f529838a78c093b9b260
  • SHA1 bfd4722c9ef0a8ccfaee36d1bcee9283fcaae60b
  • SHA512 ee571287c9194404e0ad5f08ffe3b01f8d68fade09939684b3ba4a09bf3721062f00d2b050a72898d2f735639f250e9011edd1b1ed766c333e7e7344cf6311f3
  • SSDEEP 1536:ulg7DHaVCkO8XyUKdujCc66m5tvKbUOQNieF2FfHYTolzjwGCq2iW7z:uK7AFfCGReFwfHYTolQGCH
  • TLSH
    T102A39E51B290D077D05A2430586AC2B20EBEFC3295B9C54B7BD57B3E1E71380AD6BB27
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2