Extracted

• • Target
    2026-10-13_f5f11b1664ae123a1be84de230799179_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader_wapomi
  • Size 87KB
  • SHA256 36eb4cd1f87c7ae5d82fd209ae365b46e5df7a0bd0abe1d862f29ff50e3d9797
  • MD5 f5f11b1664ae123a1be84de230799179
  • SHA1 a328276c88c04c634c92cb1f21ac54b144c66899
  • SHA512 830a6ea3ef56c499006e5242128c5332c31228a133c1b77d225048c3c64bd013d6ca5c6f61e079cebe3648bdf1d0bbb8a2be382bfba6d85f2eb6da346f2bf84f
  • SSDEEP 1536:CFGuNTmx7odcuRMRIcqxVk8Vc4AEZvzsWjcdRbBAGCq2iW7z:4xTU7oimJtAmv8RbKGCH
  • TLSH
    T17E939E13B6D188B1E0B3163608F0DA614B3FBD220EB14D5B7788129E5EB91D19E35FA7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2