Extracted

• • Target
    2026-11-05_d8fd2c6dcd99072d91c712f0bafc365f_elex_rhadamanthys_smoke-loader_wapomi
  • Size 72KB
  • SHA256 4ee7f39efc8ac88928f25590d1b820ebebcd56e4771bfb7298836776a57f52bb
  • MD5 d8fd2c6dcd99072d91c712f0bafc365f
  • SHA1 0ca07ac7fb6bbc8fb1f1242d5ee5d4f0440b0b06
  • SHA512 f1a1acebc9eb929b9aa58820a0f507f0c25e1b2fa7bbcfb3b3db61a1fb0dbb55419e4ccc61c0d786c1c240820fb3c811a23d32ebc5e4c32fa1cf4947d08287de
  • SSDEEP 768:vdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIZ2QGPL4vzZq2o9W7GsxBbPr:0e6HfDWs3oTVGtGCq2iW7z
  • TLSH
    T1EB73AE33BEE2C473C549157100A55F3A6B3F29720B61A7D79B589CAABCB2A90DC37142
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2