Extracted

Extracted

• • Target
    2026-08-21_36ea149b99abd7b1d239f33c2bb9ddfe_cobalt-strike_elex_smoke-loader_wapomi
  • Size 30KB
  • SHA256 589e3ff871613d06388f48e9bc4301eb3119d2d9bfc2d143b6f3b0a92619e960
  • MD5 36ea149b99abd7b1d239f33c2bb9ddfe
  • SHA1 a259100e1ca96f6a4ff61a0de6acff51c7d571c1
  • SHA512 e60933c7c6364704820d350f9a454e3c266d80757b1706c8660025408a0552217bd474ee5733dc82a407128c2999f331154841dd39eed1c88cf02ba0e9d4221a
  • SSDEEP 768:8vybtw3tJPAd9QGPL4vzZq2o9W7GsxBbPr:fwcKGCq2iW7z
  • TLSH
    T19BE2AE7ACFC238F6E48E647550EABAF79F7BC2238E31195BCEE0C81168539249C0654D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecmetasploittrojan

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  behavioral1behavioral2