Extracted

• • Target
    2026-07-29_79e6f69e9c9448003a1af9ec69f18d16_coinminer_elex_smoke-loader_wapomi
  • Size 45KB
  • SHA256 4dd3c80730abf601b81ef5a6a6750ad0fee8060b052ffc2b2ecc070066cafa45
  • MD5 79e6f69e9c9448003a1af9ec69f18d16
  • SHA1 081c4e59db89a471b4f8d9e0c22f108dbb2a972e
  • SHA512 3c58c538622ffb4f1f275479bc00260eca064f79cf10b0983162418558d481cd9dcc30d79e66b0cf100ae1fda25b56ecbfd4295f5fa8b3c005c49a78bbcffa22
  • SSDEEP 768:r39UWYVAQQt0NoGCEae0DQuGR7i758jgnwKwypn/E9EQwrfQGPL4vzZq2o9W7Gsn:eWYGQJhAv58jgntZ/ES4GCq2iW7z
  • TLSH
    T19723D083DF4049A6C57F173240A167459277E9B02ABF4FB786A0286FBCD5387BD009B9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2