Extracted

• • Target

    2024-11-16_fd8bd55e7409aff75d2a679da3d3119b_bkransomware_wapomi

  • Size

    215KB

  • MD5

    fd8bd55e7409aff75d2a679da3d3119b

  • SHA1

    874209c68ecb2f20c9c58138b6a016be0c08feb0

  • SHA256

    0e611596a659e76c0d8c8c51bd5ab6b0f242039ff198dba40c1848ba14181c2a

  • SHA512

    3362a7a4e2a3df77a3652044f2b3425f9c8e262462e4a00e4f6a0e16b4197c43410fe262df43aa7fbb9771467cb5b42a1f04092d8ac92d9a45e676b50b090c10

  • SSDEEP

    3072:R666SmGgfYMSLpt690O4EHIsxeqvrvuSUdybQHoAw3MVDdVY3KpGCH:R2SSI60OhHLjv1nt3Ks

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2