Extracted

• • Target

    2024-11-09_8ca7b1520fbe285260ef5de8330af154_avoslocker_cobalt-strike_luca-stealer_wapomi

  • Size

    606KB

  • MD5

    8ca7b1520fbe285260ef5de8330af154

  • SHA1

    57355e69f1f917cf44b5bdee6d92571395058f3e

  • SHA256

    573cc803fc63cd20fa7fa5212c9dfaa4a3947e2c73aa8fe1cdae8f70786f5dea

  • SHA512

    e859a1f3c54070733c1d2a50ccba80592c7392f4bb8dbcf6e3ff76418b7687de62db2c7147ddaa954dd6db582808cf74c5e71fb9a1394196b849750ddf0445d5

  • SSDEEP

    12288:KubXcwafJcLln5QwnVWqqPIBONhxsU/E:KurP90r/xsU/E

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2