Extracted

• • Target

    2022-10-13_346820512db6f2e8fb96bf3c3184ba50_icedid_wapomi

  • Size

    190KB

  • MD5

    346820512db6f2e8fb96bf3c3184ba50

  • SHA1

    e56e70fe0e28e80ce98c8da55ccc275519835373

  • SHA256

    2610512c55014a3b184ca1bdb2538324b34dc1cd762b115296fea951b1fe4dc1

  • SHA512

    e686a57306843546ff9d59246f6af3fb88ccbab5bc602c82289ffea5f7938a8312c2efe6ccb1e94c8a5d2d5afa0cac15019931c3177dccb223785367dffebab6

  • SSDEEP

    3072:lWNvj0PaGN8RWTLSQbqfJy4tfQ/ZaP0O1r2lmpDMzJD7GCH:lWN72rN2U5mk4to/I84DMQ

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2