Extracted

• • Target
    2026-06-03_fb8fe0c2dd4fa5c2182f1c1bcb8da119_coinminer_elex_smoke-loader_wapomi
  • Size 45KB
  • SHA256 2448f800bcc05201933d7f3c85f05898a5370c59ddfccee2c46ac26181a70b9c
  • MD5 fb8fe0c2dd4fa5c2182f1c1bcb8da119
  • SHA1 77078e4a66bbfd9e608dccb69f0acc384b3c3bf4
  • SHA512 d4ca49ea04f904ad8371ba25790f98c1d55ab17ec7447ccd7564ff5d6e23d76a379ca77b723996a5609a72ad139145f1156868fde033650ce3291fe7a508314a
  • SSDEEP 768:r39UWYVAQQt0NoGCEae0DQuGR7i758jgnwKwypn/E9EQQYQGPL4vzZq2o9W7Gsxl:eWYGQJhAv58jgntZ/EQzGCq2iW7z
  • TLSH
    T10B23D083DF4049A6C57F173240A167459277E9B02ABF4FB786A0286FBCD5387BD009B9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2