Extracted

• • Target
    2026-08-31_d28e5af5390500a39f6e92ff6dee9207_coinminer_elex_smoke-loader_wapomi
  • Size 39KB
  • SHA256 01e0168e0e94249353d2ed2148a9a8c3f270678ee88a2aa4196dd0945e090345
  • MD5 d28e5af5390500a39f6e92ff6dee9207
  • SHA1 0012c10132370e29d52d36ab4b6c562895e4f8a3
  • SHA512 2fedd66d31ff6d7d121c8ca809aa58e4c173716bb735b20420a2c857c4f03438e3aaae8d88bc335aaf00ec6ccb775225a4b3cfadf23f3fe33a4b9917da91988f
  • SSDEEP 768:/DNwJxC6tbKwO2CbEZ4A1F7U2QGPL4vzZq2o9W7GsxBbPr:/DNwJxhZK5RAYtGCq2iW7z
  • TLSH
    T1CC03D09387A5C4BFCCEE22730153A2FE9287983089B967D787A44CDFF845B0458276A1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • UPX dump on OEP (original entry point)

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2