Extracted

• • Target

    35967ad7ccb1a3d5136b9d5b22760ac188e1521218088e3918c8df32f2d21a02.exe

  • Size

    432KB

  • MD5

    faa973afb16c19fd0e6cc3bde592670b

  • SHA1

    f3ec848e6e30979d9c77f2318223889d1014eead

  • SHA256

    35967ad7ccb1a3d5136b9d5b22760ac188e1521218088e3918c8df32f2d21a02

  • SHA512

    7527a62167610024053f294c789cff559ee55811a7f4c006c353701994001cd2f5c81c9e517aa6024ac6c8aeeb8f9a1e02bd950565f937bddf1267cf5d4d2c19

  • SSDEEP

    12288:M/Pkft1K7RIqJS8pHhUzlUbgMSSGz90lLpwTceN:a8ffK9Ip8pW2bgMS/90l1wTLN

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2