Extracted

• • Target

    2024-10-26_4012aaffe243b56c55138af1448e784e_icedid_wapomi

  • Size

    310KB

  • MD5

    4012aaffe243b56c55138af1448e784e

  • SHA1

    0e9895ac175111131bc67bc100252f0fd2257831

  • SHA256

    91dc7527c6e42059dfa0b50eb60a3dd76f2ed2744608aa6f25fde070c030699d

  • SHA512

    ad93a4773632250468fa00f7ee6b5b1b46c98950610d8f208cf02cde910574b6df1ee6a14016bd2a513f8396632c99b2559189baf69afee8b6ff46cba1f2413f

  • SSDEEP

    6144:oznAtGqS5NjM2KbQbNYuhZ+6+eAbuQ5Zu60HnPLhDgW0:oTLnp+BCQ5Zu60HnP1

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2