Extracted

• • Target

    986b1a99ce62804164313a51d9141315d9af6b8bf4ee9cf84c86648b31052e2a

  • Size

    1.7MB

  • MD5

    36b7c227dc3c628140af9b243ae11234

  • SHA1

    324b0c88bee438b60b6df29d800207446f28ac21

  • SHA256

    986b1a99ce62804164313a51d9141315d9af6b8bf4ee9cf84c86648b31052e2a

  • SHA512

    3acc6c87cfc610ac93c6ba0b54e340e27d5d87fe9dc0dcaa6fb64c5530fc399c124e83c50aeae6f72b790ead31022b5c1863c1f49e476daa52977ff314c95124

  • SSDEEP

    49152:ob95oohZXtemBiR8qfqlQ+oqPxGFFmbn:W5ooXXtemkslQvFEz

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2