Extracted

• • Target
    2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 60KB
  • SHA256 5809426729c0f98ed851a51bc1d0e5c9b973e0526fe90895b98ba2b9aa9b0747
  • MD5 c6fc43910ee5ade26273ab86c01da88a
  • SHA1 8dcf7ca7493a806d3f62106efeaaae7313680515
  • SHA512 bfb30d58623e89eeb5aa1f2cecb0a705f4313cd03b6fcdadb5e31caee8bf1c7c5321a825e74849fcf2ba08036275d89f6123fcaa7a2acd685bbbb9f37e69c747
  • SSDEEP 768:KqPnnByGt57EhDssh60dEDS2An7poavRofE0D94PY/kCesQGPL4vzZq2o9W7Gsxl:bPBRtj8Hz7xvN0DnhevGCq2iW7z
  • TLSH
    T1ED538E1236D08476D0621B3058B5A7B26F3BBC615AB080AF3798267EDF727809D7835F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2