Extracted

• • Target

    e066a8229d6660dceebebad79c110b67de0918e76a41cc577f613c5bb7e0a139

  • Size

    832KB

  • MD5

    65c89db2a62374e4ab8c2e2318775c2f

  • SHA1

    c9a7ee1f7f0834d7e04fe31482f618ccce6ead41

  • SHA256

    e066a8229d6660dceebebad79c110b67de0918e76a41cc577f613c5bb7e0a139

  • SHA512

    6578ac993dc32647e51a940e0be8807b6babd21126ddf06fa0e583e692fb5e42c4f152b84586fccb5b65737acc848ace14771b0e95a6743d0c12fe23f6e91e50

  • SSDEEP

    12288:Rq7HdsjnEcEwKhPcx8wLcZWRz0w7r5TspmpKiOqF+By3AhhV:Rq7dsrEzwI0x80cuympSqF+By3Ahh

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2