Extracted

• • Target

    e60c33f0a35fc4db1e38c77af19ee1cfe4d6b6ba9182a1e0cf56f65783e740c2

  • Size

    1.8MB

  • MD5

    4f3029ca93d4ea7f146fb4e255742ace

  • SHA1

    319528d2bdc847aa60f8d39450bfd1ac7b90108a

  • SHA256

    e60c33f0a35fc4db1e38c77af19ee1cfe4d6b6ba9182a1e0cf56f65783e740c2

  • SHA512

    a0f069f6d33895838f20bf2939d5a4ea365541c15504b31fd47ffefd6a7e55ff047a1d95cf0aca1e8a84f9ee240beafd7e1a3f52a577224cfd5c79d03216952b

  • SSDEEP

    49152:QyQpzmWZkUV4EYuRkRxuZ0+4uEiyoryKlrSgfJgwY2l2+PAA2aKUl87j+:ezmWZk+4iRkmZ0+4uEiyor9lrbfJx6Aj

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2