Extracted

• • Target

    fa917ce96db6d93b66f6fe0e25de78871c42ffd8c10b8e03a02390bd5e0ef2ab

  • Size

    426KB

  • MD5

    99565c246eaa4f874cea41b254f7b196

  • SHA1

    f6c3302e4ba32cb397c47b5666703b7e2b4fd287

  • SHA256

    fa917ce96db6d93b66f6fe0e25de78871c42ffd8c10b8e03a02390bd5e0ef2ab

  • SHA512

    de79cf3fa808a2db2efd891d9dac223fb479ceab8656396666d22a6a6dae131059b3b42f1e1a2f77ff3bad697f6d080c3e231115a23097e4d0258ee255a3f57d

  • SSDEEP

    12288:EqbCvwrpgM4kteBXPDT6boKhJm+EMjJdgkABcafVMlePDPO7B:HbCYrpgMjteBXPDT6boKhJm+EMjJdgkD

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2