Extracted

Extracted

• • Target

    21774c4738539daf6f2e348afe5159d9a5e8e85b034acb239176ce27bebffb9c

  • Size

    232KB

  • MD5

    1240c2b02ccf18357e1bff94f0b4afdc

  • SHA1

    62dba22a7214051e7f6d21df13dca10d551364ce

  • SHA256

    21774c4738539daf6f2e348afe5159d9a5e8e85b034acb239176ce27bebffb9c

  • SHA512

    8c357fd51281e9954fa8a654fe2f7c150624c05646fcb29e547df84cb3b6fcd05b92e192e2dd7c1027e246dfaae671e0f67f6300d21f92cafdb239bc96c9161a

  • SSDEEP

    3072:Wn+htWMtf+7GZYGVA2QJgi8xJLDoUiLGCHObD+g6jBRnRvtrmBT0FHm:oEGqZYGVd82PD2yLIRnBtaBTcG

  Score

  10^/10

  bdaejecfatalratsalityaspackv2backdoordiscoveryevasioninfostealerrattrojanupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • FatalRat

    FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    infostealerratfatalrat

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Fatal Rat payload

    ratinfostealer

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2