Extracted

• • Target
    2026-09-24_4cbf146d3b711443c41ebced6ffb2aa1_coinminer_elex_smoke-loader_wannacry_wapomi
  • Size 160KB
  • SHA256 a3aca28a0621ce953e5ff0de2d1204f74b3031adda5739bab9ffb65da1f5d1cf
  • MD5 4cbf146d3b711443c41ebced6ffb2aa1
  • SHA1 ab90448d599309ffc4ac6ad21ed11bb57f74292f
  • SHA512 4c79dd7adb75a1ba026f6f3a8a49be00c4692d644aee1c7d82a1cfb9f1c45d7ad0ed991b039632bcba7560d01db9f3d5219b1d1c03d49f9f96e87c9736cab95d
  • SSDEEP 3072:jcx3OldTDMITfDrLt/XJbgmXkVaAxsSl49xDGCH:jcwUITfnLbkmXGaRS06
  • TLSH
    T14BF39F33BFC005B2D752073659CA3F6AE7F9CD341916EA42C7406D8139B5DC2AA2F256
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2