Extracted

• • Target
    2026-07-01_70562f8d99eecece463ee65cbd6d0eea_coinminer_elex_smoke-loader_wapomi
  • Size 419KB
  • SHA256 c657f4944a7660a6c836066522cfb973ca14ec16e12d4b2ae02883ba7b13b49a
  • MD5 70562f8d99eecece463ee65cbd6d0eea
  • SHA1 e0887b43c397e11af1d52e994744c1b458da3d5b
  • SHA512 7ec9da600ee9c846cadb7eed9c1b17a1f2a27abef470867e98ef8fa91795c0de95a63038e9006e98e49fd35dbcd7a4e9232d59bb1bc04ce145e7c0c92223cc47
  • SSDEEP 12288:+VugDZ9r9oEExcbQQCIDeufHiAlbcUvAkyfAE4qJj1MX:+lr+EExccQCIDeG5iZAE4A
  • TLSH
    T12094234E8A896A33F0EAE03429AE1DF19E39541074124DD7CA9FE44F3DD953B0F26A17
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2