Extracted

• • Target
    2026-08-02_576ebbc9c239f6181a438ba813e9b581_coinminer_elex_smoke-loader_wapomi
  • Size 891KB
  • SHA256 fb583fbe0e58a8b0bb3789dffef2c2d50f2879d4f5b5a868ac6a6f7d273be2c4
  • MD5 576ebbc9c239f6181a438ba813e9b581
  • SHA1 56fb53e1dfa269b589404c10718b202da05f7da1
  • SHA512 9dbd5f6199d16b8470619bd83660d879f98d8e9aea6964850c75ef5e1f200f39f2679924fc5a70ad3a572e5ce18fb07c20bc5394e4c7475b612a840a8c1b7e25
  • SSDEEP 12288:qozGdX0M4ornOmZIzfMwHHQmRROXKFHhFjvVAcJlbqm9is3MjNindDO4FVALS/Bt:q4GHnhIzOarrVuy8jadVFZIV7Um5iJ
  • TLSH
    T1A7152308E5F49127D4E605FD49753677396F85F2B242BA83D6C1EF4878A1B09EB23238
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2