Extracted

• • Target
    2026-11-11_0a427deef39e646291f3fa20e99bd625_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
  • Size 112KB
  • SHA256 eddafa409226b6d2255669a152e24fe5be932d3a07e88b0704a619a0535b3753
  • MD5 0a427deef39e646291f3fa20e99bd625
  • SHA1 b2479343a189722dd2e2186c2c6417b8038eb539
  • SHA512 c7d0f3c7eaf0a0d5e88b5da5682bbb488eb4f441cbae953d2b0fcca6809a05e2a8f2fea5c0d83de929d757d1de3ac96712b27025e3c7c9bc7e37cc5831601813
  • SSDEEP 1536:aogtezQFW6GRGiJoOuqSyEQax/wGJKq1Kd0hT7LbMLitTIzU92FfHYTo700GCq2d:aobLh1JFWQaP1pT7kc39wfHYTo7BGCH
  • TLSH
    T1CEB39E217390D0BAF45624305D2AC3724A7EBC3145B9898B73D47B3E1E713C1AA7AB57
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2