General
- Target 2026-09-25_979f34b487ed6a02d05219deb663ae93_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
- Size 205KB
- Sample260925-2e2nwayanc
- SHA256 8815488b52c91f82020914c12702057abc2ad805aee81f2ebb438b396b16bd07
- MD5 979f34b487ed6a02d05219deb663ae93
- SHA1 db73d7f83fe3537c12240175e98f234f49c0cffd
- SHA512 0eac2659733669484754d9a7b11d7a479d07ee4684f71274970723b11d08fd9931cf09b9b22a7a1df6ed101b1282dc990f0afece7e05012bb898c0296df41b14
- SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQUGCH:SZgyrqdWjibwrEULieF66u/40sep
- TLSH T17A246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00BBD5F306919A2835B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_979f34b487ed6a02d05219deb663ae93_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-09-25_979f34b487ed6a02d05219deb663ae93_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
- Size 205KB
- SHA256 8815488b52c91f82020914c12702057abc2ad805aee81f2ebb438b396b16bd07
- MD5 979f34b487ed6a02d05219deb663ae93
- SHA1 db73d7f83fe3537c12240175e98f234f49c0cffd
- SHA512 0eac2659733669484754d9a7b11d7a479d07ee4684f71274970723b11d08fd9931cf09b9b22a7a1df6ed101b1282dc990f0afece7e05012bb898c0296df41b14
- SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQUGCH:SZgyrqdWjibwrEULieF66u/40sep
- TLSH T17A246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00BBD5F306919A2835B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects Stealc stealer Version 3
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.