Extracted

• • Target
    2026-08-19_b544428884240251aaf81fcb41687571_coinminer_elex_smoke-loader_wapomi
  • Size 419KB
  • SHA256 596bed6d59d1b84b512c2a27851a0bbb9f3973af31daa316d9de0e33ef3e5bb1
  • MD5 b544428884240251aaf81fcb41687571
  • SHA1 c8e78aed4143968ff85cfe34495a3981447d1875
  • SHA512 0033ebf02eeb4647ba3f1ef831cfc3604a703b3760ddf83a7284faa0822fe9f73603495a15f23ad0defef1bbefffa8640813fd5330583669976759486a43bca5
  • SSDEEP 12288:+VugDZ9r9oEExcbQQCIDeufHiAlbcUvAkyfAE4qJj1MX:+lr+EExccQCIDeG5iZAE4A
  • TLSH
    T1B494234E8A896A33F0EAE03429AE1DF19E39541074124DD7CA9FE44F3DD953B0F26A17
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2