Extracted

• • Target
    2026-11-02_0ad326953e527c1c98f1e3083000b24e_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 112KB
  • SHA256 b67607b00b29658e3bf068c4bcee057ce49aa6cc4e30701510a2d74a074284d9
  • MD5 0ad326953e527c1c98f1e3083000b24e
  • SHA1 29301f76be685ddc466f6bad093673b612deb9aa
  • SHA512 f928fdd2a5070029ad14e23de4280cd26f2b5520d275c3162da6c79343561822e01f25d2a1e4766e5b7621a980262d13bd02e549bf302846a9585c154e9d6a80
  • SSDEEP 1536:aogtezQFW6GRGiJoOuqSyEQax/wGJKq1Kd0hT7LbMLitTIzU92FfHYTo7VAGCq2d:aobLh1JFWQaP1pT7kc39wfHYTo7KGCH
  • TLSH
    T1B3B39E217390D0BAF45624305D2AC3724A7EBC3146B9898B73D47B3E1E713C1AA7AB56
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2