Extracted

• • Target
    2026-09-12_56dc826c2de8fc65bf4c1b180763bd64_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 98KB
  • SHA256 b554f1f688ab1d056f1cf5dfa928e845eb20be60bcf9e08efa6c3816218cbd39
  • MD5 56dc826c2de8fc65bf4c1b180763bd64
  • SHA1 d3f3d2f28039c3a1935ffc74cea05bbdd4ca9397
  • SHA512 94de6f71a5199251efb2fb40549fea36090a54f7de55f32b3235652b0baadcfaac5dd370097e1ff99bb35929d8d56c59120b89a1c1390f738ccc8d7af8aafa21
  • SSDEEP 1536:+Pz1INzhb5e0+0Uxf4JgrI/7qPkNRu9PuRpvwBVGCq2iW7z:+PzK1NY0+5Kx+kvuARpvaGCH
  • TLSH
    T178A39E127B41C472D862157224A9D3B39A3EB832237994C7F3D40BFA0EA53D0997D76B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2