Extracted

• • Target

    2024-11-20_52a5822ff450da21048368f7a163fdb3_bkransomware_wapomi

  • Size

    7.3MB

  • MD5

    52a5822ff450da21048368f7a163fdb3

  • SHA1

    18eae9c5e1276f871f0a82419311f8bcceb19bad

  • SHA256

    be5a122273e7376d52c86d72d8527a90881fa802fe819170537280bef596b43e

  • SHA512

    1a4601ba50f1f71b51afb60caedbec95d1381896c0b0535e84206df65a49132faf3dc83c75871ff22747275a4153fcbc9bf9cd6a94177f0bdaa28d564e654125

  • SSDEEP

    196608:kSxt5g3vWwe9f/3R4Zq4V+3XcJHQw4O7NADtVev+Tt:kSxrg3+we9XR4Zq0l7ct

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2