Extracted

• • Target
    2026-08-18_72f47268ef728de59f030aeacec0adb8_coinminer_elex_smoke-loader_wapomi
  • Size 406KB
  • SHA256 3167374a9f0f078e79344c09f82929d75060c1f5b9120efa88fc84949381198c
  • MD5 72f47268ef728de59f030aeacec0adb8
  • SHA1 c68085c31c594eb7b691424044d5d63b9b759d33
  • SHA512 2c3671ae3636b6dcfd53cb298f0f55d5ea00254de4213422b4c300da8387d6dbb7f90ccc2cd4dccdf1b556e0bf628c9206fdd476dbb10fe97eafd1c2c106b67b
  • SSDEEP 6144:DYpIhocwKPmpFFq1E1t+R84Gjvbf4VOoZ8ZWymz/CtmkgpWXB:spyocByXtK84I89Iwru
  • TLSH
    T1229423D3D25734A2C0768F316297288752E5D3A44187FF8F2B13A96D3E5B9320D63B22
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2