Extracted

• • Target
    2026-07-13_d1631797d345a1ce95b5731423213288_coinminer_elex_smoke-loader_wapomi
  • Size 42KB
  • SHA256 8221db67e1f048ca89d952f13346090fd6fe30806e6bd6f5670f3887e9456804
  • MD5 d1631797d345a1ce95b5731423213288
  • SHA1 e148022cac7309a8375e5cc82c02e62ca88bf2b0
  • SHA512 aae686a17e5179b2156ea2d341a83a690c4da3f80acd42f77f942de2a19b350a7fb1bf9208d680d079c4a877a05614b19c42e16db7a24bdbc75d0200e8b1a670
  • SSDEEP 768:5ofFhw9NkRKFqIA4Q0ndmMI15glZBfwkQGPL4vzZq2o9W7GsxBbPr:WaKK3mM45gh43GCq2iW7z
  • TLSH
    T1C513E163CDC0CC77C8CA21731017752363A518B21AB9A6EFEA5854EFBD4FA0CD897562
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2