Extracted

• • Target
    2026-09-29_3c250c8a6341b16ead752d2b8a5eb796_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 112KB
  • SHA256 046a7da0cc25cbcdb3314a4823051e12bc7076038cd347c07c40d62c9a65ebaa
  • MD5 3c250c8a6341b16ead752d2b8a5eb796
  • SHA1 334677e639ce97f91a549b834d684691c7cde67a
  • SHA512 3a7989b4268001aace9b8759549ff50702d2170e82cdac3b276bca0308657e3fe7a1ab80c01466f8d1f3e2ad4f571e83762b81892420a98c2ea59dde0383808d
  • SSDEEP 1536:aogtezQFW6GRGiJoOuqSyEQax/wGJKq1Kd0hT7LbMLitTIzU92FfHYTo7OCGCq2d:aobLh1JFWQaP1pT7kc39wfHYTo75GCH
  • TLSH
    T16AB39E217390D0BAF45624305D2AC3724A7EBC3145B9898B73D47B3E1E713C1AA7AB57
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2