Extracted

Extracted

• • Target
    2026-08-22_16135078bcf522eaf6a0d989a40c3214_cobalt-strike_elex_smoke-loader_wapomi
  • Size 30KB
  • SHA256 969622dbc01a463dc9428e95707f5c1c5fa2835ab4cbfa44041e52e8a7820ead
  • MD5 16135078bcf522eaf6a0d989a40c3214
  • SHA1 2aad202953d37f94e793bd52b3972b2edfe7485e
  • SHA512 cc46cf165adb72b11ea740341491598a5b160660799530591beb867a1726b9ea0d1322671df410463514c7eccd83fc223760b30bb94f4d8bd7a2217e3c838a20
  • SSDEEP 768:8vybtw3tJPAk7QGPL4vzZq2o9W7GsxBbPr:fwp8GCq2iW7z
  • TLSH
    T113E2AE7ADFC238F6E48E647550EABAF79F7BC2238E31595BCE90C81168539249C0254D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecmetasploittrojan

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  behavioral1behavioral2