Extracted

• • Target

    2024-11-11_b12cee209774d385be3ae497e7c63e11_mafia_wapomi

  • Size

    188KB

  • MD5

    b12cee209774d385be3ae497e7c63e11

  • SHA1

    5f064ad90e5e4144e2e9b856414680f21798907e

  • SHA256

    ce35342f5478d4d93db3abf616fad729cef7d1de7034a30f418e7a98240f0c2b

  • SHA512

    acb432f388ad10f61cba32c055d2abe666b57dd3a69d900d525aa196d47b97eadde6220f9182796fa31010951bd460ec4ba547259fa4a26cabdab3fdc5fc0f0f

  • SSDEEP

    3072:Djaz/kdH1QuA3rGuYt/ie+0T1ddxWTXOvXjfaz4WUSXpltz7GUd+w3wieCzp8GCH:LdHeuAbGuYVie+0T1ddxWTXOvXjfaz4u

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2