Extracted

• • Target

    R66EPH7.exe

  • Size

    2.7MB

  • MD5

    b20618d6660ba973390fa8a8cb3f09fc

  • SHA1

    1782d3cdaa30fda28f89c6148358fd8d2c674466

  • SHA256

    c37a58f4555b2370695503dc2aa5dc126c3bbd1a16d1b305cc3921ae56e68a97

  • SHA512

    09a39719ebfba31bd551b2888e28d7c5d5df3560751d5fa9da4169ac7ec767b4e099b856a0e6f045320df8dc762da2edc50cc4bdbb97b06a76442aaaaf6361bc

  • SSDEEP

    49152:UlFcqJWq7TVCfF92zMWGyBk4O1iVIQBzUcdm/ll:UlF1RCN92zMWGyg1DQ+c

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2