Extracted

• • Target

    2024-10-29_ba1e99b20a4e55dcb4fb59423379b1ca_mafia_wapomi

  • Size

    187KB

  • MD5

    ba1e99b20a4e55dcb4fb59423379b1ca

  • SHA1

    e9583736cc27f3b9a007f55869a6b08ecda1d42c

  • SHA256

    adb3c5207f670df6a567ac0a930e756953dbd360f5f3e6dc55ef293035c53509

  • SHA512

    2b60af358db0ed5bf4771a05e49e956a8a4c4641ae1d031b181bd0628b91b8f1505a6e0e7898e78a25b63a469c65e38514cf7ba81d08cfb9dcbb78c16273ba47

  • SSDEEP

    3072:tLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6d4n3meIOtGCH:z83YLmUOFXEEZnRCI3AXny/Hj8LG4ujd

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2