Extracted

• • Target
    2026-08-23_8b36e6db8a3a99981d1925e5c8079f4e_coinminer_elex_smoke-loader_wapomi
  • Size 41KB
  • SHA256 939f841bacf130fd0c7f7c27e45e3b4ece348bf64034779a6329ef04ecaf8e95
  • MD5 8b36e6db8a3a99981d1925e5c8079f4e
  • SHA1 b8808689fb4b3dc89d01140de5726cd8722cb863
  • SHA512 ee3156e087ec38cd7b6ef429c3a3f0c2893a657debac3877baf2dd3213016f130daebb51d55adeca6d1955501199c601ba9601a2a069f4b5533380471e64da86
  • SSDEEP 768:Yiq/fXUee+I6OSA5EAfgSIe0+K7XOyQGPL4vzZq2o9W7GsxBbPr:YhnXhDjGEAxIeFGXOBGCq2iW7z
  • TLSH
    T18C13D0E24FE4203AE0A5787711A3971586B1B771CA79D25FBDDC700BEF01B008B1662A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2