Extracted

• • Target
    2026-08-04_42a1f1d5615f857dd3035bba78d17831_cobalt-strike_elex_smoke-loader_wapomi
  • Size 117KB
  • SHA256 58f2dbd0a7df8137b0cb5b1e238465ee47ee5835aeebc422cb56cdf99b7c96f4
  • MD5 42a1f1d5615f857dd3035bba78d17831
  • SHA1 b6b259ca173f92bb062e15b44691b375f389d0b1
  • SHA512 b36fb62d42eb700dc87b183870f01997d69765b1b51577e827c6f05cfcf4086d28a6e07b8be9dddcc785ed7c8f19b241bbf2486ef4b6536587c9984d200de930
  • SSDEEP 3072:+qeGaJn+GGKzpg2CDDo9jeuIrpfjDX/4UzGCH:NaJqKlaDDo9qlfjDXe
  • TLSH
    T1E3C3BE8BFAD094F2D44E217D0058B7A7CB30EEB51850DAABF3991CFE7C2A70558D9642
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2