Extracted

• • Target
    2026-04-20_cdefc5552feb9d9a0cacbfef46f1808e_coinminer_elex_smoke-loader_wapomi
  • Size 39KB
  • SHA256 47491a20f927f2bd8899dd7dc5a0cfe2cb9bb6f6f37f3e13d139352cd6f14c53
  • MD5 cdefc5552feb9d9a0cacbfef46f1808e
  • SHA1 71a0a6a31960ae789130a87aeb24baa7a2dbc440
  • SHA512 35908143b13d59ef2a689bbd24c0c8d084a55f61ebf4883bcf2187f007d97298a38cab3e29515931d8e502a798e30f44e8431af8a013fb2104dcffe94e81fde6
  • SSDEEP 768:/UNwJxC6tbKwO2CbEZ4AGSQGPL4vzZq2o9W7GsxBbPr:/UNwJxhZK5RAGhGCq2iW7z
  • TLSH
    T1CF03CF93872284FBC49D53B313B76055F3A798306478E3D78B6094BF9D6BA037B16162
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2