Extracted

• • Target

    2024-11-11_2feb21fbc8d5c1ff978094e802c3d4c6_bkransomware_karagany_wapomi

  • Size

    90KB

  • MD5

    2feb21fbc8d5c1ff978094e802c3d4c6

  • SHA1

    9abd33188c6b9a5b4318b2fe79f876679e23f604

  • SHA256

    963f5478785208b17e695f4c3fab0ffc4b713072ecba6490548f18b075de5381

  • SHA512

    ca5ea1c8bfcab56b28f5208382b8cc405cbef64a327b5dbd3a62f1994a5ee641e8beb2f9c243ea2603c88d2e89137b5f16fe69a89866e3cb47199d1fdb415501

  • SSDEEP

    1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaOXGCq2iW7z:ov1/G5+L1C64GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2