Extracted

• • Target
    2026-11-05_aab957026096eecd72c93de1eec3dbd3_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi
  • Size 88KB
  • SHA256 49683d371212ef81bb722fc49cc8842926ee47d765ed046820245e41af76b9f7
  • MD5 aab957026096eecd72c93de1eec3dbd3
  • SHA1 888d9477111f654aa41265d71d0813ae3fe2c48d
  • SHA512 ca6b6936a3bb88878b73d326e397658b0eb1194fd40a41efc80dce07fc0befb73ac92741ef312da94069d2e8858b64f91f806059c8fec1844a645429546b460f
  • SSDEEP 1536:0URR4jH4Op8rvYjenPskDkhkxslyYsRfXtOWGCq2iW7z:/G1+DBslyYOfXttGCH
  • TLSH
    T1CE934B1A28438037E0160471C19E95C15FFEAD573AAB646FEFC819490DE31BC96AB9F8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2