Extracted

• • Target

    d9a4f54c662d3aec62bb01cde6af3f54c0a028add5bd3200543f085f771e00b3

  • Size

    2.7MB

  • MD5

    37b5c009c69a10a13cc9a566bfd59207

  • SHA1

    9d5fb6faa35f0ebeea941e2f206fa463a73fd1b5

  • SHA256

    d9a4f54c662d3aec62bb01cde6af3f54c0a028add5bd3200543f085f771e00b3

  • SHA512

    b008c035c3db830143d702f719001436c137d90a330c4666171173ec839c177b5eacb62cdc158287c0df14f58b22d902bd5090eb0c4bbc6179f1f3584a69216a

  • SSDEEP

    49152:K5yaUm6/qD9dDqnroHO0ksLzZmLXpO9q+0Ollh1d2HObA3:K5zX9cnsHXLzZcZy0Orhf2Hv

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryspywarestealer

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Drops file in Drivers directory

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  behavioral1behavioral2