Extracted

• • Target
    2026-11-09_a65cebcd9987196f9cbc263ce1e408d3_amadey_elex_emotet_icedid_rhadamanthys_smoke-loader_wapomi
  • Size 220KB
  • SHA256 2b0ec24ca29ec2904ab2a2fea76259759ce7ce1f6ba1c6d9c613bd947cfbc6fa
  • MD5 a65cebcd9987196f9cbc263ce1e408d3
  • SHA1 4b2c87e3b2d68f72086ceac3c3b2907c225c0f09
  • SHA512 94393c55a779529e1d2e991b06dcd2db226fb5cd5acd60ff3db9a16026c50d39edffac25d576a486272664be3adbda6511f8300b9b177476196b628858261f96
  • SSDEEP 3072:Ao6ytVZIBHvYZENWGc3f+QtnA+lAO5+foehUpRwSbrVFwJvlAdKl47dGCH:Ao6fHvxo1PBtASb4s3zgiI
  • TLSH
    T1AA249D2376C1C0F3C553253109DA97AAB3B5FE204B3A92D367843F1E6E356E59A39381
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2