Extracted

• • Target

    e68afcc575ebf1d1708b7f431e0ca79b04c4da30994b273b8f5d1269bf5c0298

  • Size

    1.2MB

  • MD5

    e5492bd94e7b55851f1bff1fbfd25210

  • SHA1

    d49482e591c97431527d5f2dba1878b5b0c53eea

  • SHA256

    e68afcc575ebf1d1708b7f431e0ca79b04c4da30994b273b8f5d1269bf5c0298

  • SHA512

    6d3cab7fd53fd208ed483e784e3e09ebec4b38e1a0cdc2c95e14b516fdab7a131288b6eaf313c032f2cd534a09694aee02a49a5bbb0c59e0376986738f3de494

  • SSDEEP

    24576:3Q8OqaMRGwnuzNgJoPugNRa19uXsyNqNl6AuIyallR5OEB2C:g3wnuzNg2RaTyNfF3a

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2