Extracted

• • Target

    2024-11-16_513dccd183caadae48d5b8754d298c5e_bkransomware_karagany_wapomi

  • Size

    90KB

  • MD5

    513dccd183caadae48d5b8754d298c5e

  • SHA1

    7570829860498d05312ef6dd9a38ce7fc78520f7

  • SHA256

    ba8341970cb8f7cf81b6dc643f13c9569a63238cf74c0d06d0697a4748111ce5

  • SHA512

    704d5d5d1e265d7ab7279ebd51647431790e1523711f678086f9dec3cda513ab56f0287545e71fbd4aabf290e4aa4cff5558fe2bc664e436060d7522e4ee9b53

  • SSDEEP

    1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaI1GCq2iW7z:ov1/G5+L1C6kGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2