Extracted

• • Target

    2024-10-04_6c69a8bb950e503de79adc76474bfee4_bkransomware_wapomi

  • Size

    3.1MB

  • MD5

    6c69a8bb950e503de79adc76474bfee4

  • SHA1

    0a218d9b82f1b72d0323a98fce4e3e5fb58d9dd3

  • SHA256

    67bd48db109dec0d8a98ffed3dfa7fbf6e6649e321b642f03f9db58492a2d222

  • SHA512

    e357cfae7c165478e02a0a123441bba0cbbb36f8abd1f8caf8d16a5e6aedc02e926415a7651667778adb604bf65b44d06eab28897c6fed078d0603332b2333f4

  • SSDEEP

    98304:qZj1x+38SIfmFk25G3Iw3sNWzp3m21z4LflXXWhAA+:ht24Uxdm21z4fBA

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2