Extracted

• • Target

    2024-10-29_a635774db67da3546b9dccd7f86e23b7_snatch_wapomi

  • Size

    1.9MB

  • MD5

    a635774db67da3546b9dccd7f86e23b7

  • SHA1

    5b598dae8e5bd153dc413d3b5a806ae51a05d963

  • SHA256

    735f10f71e0e5e774d24d0a6047f152aaf3c231fc2cb1bd2ad4a681e3cf4cf33

  • SHA512

    015daca7f8fef18502544b9a9b4c0b164c791e10ef6374b29d6341e88dfbcb3d87745b2eedc19f681b35a3039412e44d16dd856aa98e28c6758b3d41d6d6b176

  • SSDEEP

    24576:r+aN0Icp9Z0apnK+3VOsTJMvBD5ABlciju4/ap2bLDWs5vHCng/OCTAe9dqHioLd:TNg4AIs1Mv+z1/2M9IHW+3gU11IBdWx

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2