Extracted

• • Target
    2026-08-04_e581c0dcb899b19e8b8b313082b2f7b9_coinminer_elex_smoke-loader_wapomi
  • Size 42KB
  • SHA256 07ebcdcdbba6a11b0e7c99e0d1e5dca0d917968cbea9f4df76a2fac4f5ec0f41
  • MD5 e581c0dcb899b19e8b8b313082b2f7b9
  • SHA1 6a4a0f6d02df4b949a50e1265c23c1a11f80ff15
  • SHA512 8e9c9ec024ba81705551644b68aa9b4a32a44f670a3d27277d2b72da0cab0f3f17cb2914e1bad92c99708d9b847fb7d09357a5f9420ba1786219266a805434df
  • SSDEEP 768:5ofFhw9NkRKFqIA4Q0ndmMI15glZBfVFQGPL4vzZq2o9W7GsxBbPr:WaKK3mM45ghNiGCq2iW7z
  • TLSH
    T14213E1638DC08C77C8CA21731017752363A518B21AB9A6EFEA5854EFBD4FA0CD897562
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2