Extracted

• • Target
    2026-11-04_d124f045be2ba74d55c2d27b63eda82b_elex_nymaim_rhadamanthys_smoke-loader_wapomi
  • Size 48KB
  • SHA256 486282bbe8079aec12060e6fed9460844ee2bc3f7a126ee705cb8af5a936dfae
  • MD5 d124f045be2ba74d55c2d27b63eda82b
  • SHA1 9d14b0038ef906369c843dafe62d03bffe0c3a99
  • SHA512 661de5b865a641d4f511a128ab7e6534bef8a92a856538930d292ad5e0e249a8fe602d41a1a55092ef6d4be0556c45421b8e31aff003bff499b0820b0286becd
  • SSDEEP 768:vnrhjlH1IyaQxVh+jMoXFuxQGPL4vzZq2o9W7GsxBbPr:19dhxLboXFu2GCq2iW7z
  • TLSH
    T15223AEF36CA045B7C4C9E031A0F96B66577B65330671A4DB87908C5F2E32680EC3E7A6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2