Extracted

Extracted

• • Target
    2026-08-21_2d311b0907d5cd90edd12fb5c607caa4_cobalt-strike_elex_smoke-loader_wapomi
  • Size 30KB
  • SHA256 60919f5fa7a7fa04dcd3fd13282d7e90ba51dc39a97ce967d83d4292a82c7752
  • MD5 2d311b0907d5cd90edd12fb5c607caa4
  • SHA1 48b7268a159ab6c7f707a0a78e7a40d4f2522b9a
  • SHA512 69c78f8e6d2fd1e4eb9a207da195bbddcea498dd5bfaa8a24aaefee66c4ebe4699a9d8d0178f5fed7e313d56a227630b0bb8b73ddeeebabc154e40255524d0c0
  • SSDEEP 384:8SykyDyLXrRwaNDyAp+S1XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9z:8vybtwlAxrQGPL4vzZq2o9W7GsxBbPr
  • TLSH
    T12CE2AFB2DF82A8F6D49E647140E672F79F7BC6238D21496FCF96C81178138259C1724E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecmetasploittrojan

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2