Extracted

• • Target
    2026-09-29_50efb12d4c5f3b5084c8f07c30c3bb22_elex_rhadamanthys_smoke-loader_wapomi
  • Size 60KB
  • SHA256 8231f6513a162a9b94f37f9804da969fd045b247350c235bdc59f9a46fd3ed1b
  • MD5 50efb12d4c5f3b5084c8f07c30c3bb22
  • SHA1 43f0e4e1c09982aa6707ef5d1dad304f18facebb
  • SHA512 85661658a550f6035d7c48a222fed72d639ae3b927c416e2968cedfa827f5d62b6b347b6e054d0f257421d32f16fa7c0765ffb6d5263218f031d7982e56ebdba
  • SSDEEP 768:ya1qGZIyiZjaflAkOCpwjWviZKB7JD663QGPL4vzZq2o9W7GsxBbPr:ya1jZCZj83Hpwav4KDDnAGCq2iW7z
  • TLSH
    T16953BF237ED080B3C8CAA6F141995B87EB3B551407B591E39F644C5ABF637C0AE3A346
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2