Extracted

• • Target

    2024-11-20_261f187aebf6c954d53e00b3ea7659b8_bkransomware_wapomi

  • Size

    7.3MB

  • MD5

    261f187aebf6c954d53e00b3ea7659b8

  • SHA1

    a93d1b60e776999213069723769c320eb8926501

  • SHA256

    6f24dee5ae73b3544d6653dc6f7ca9af72dbe84902deec87547d98e6ea81849d

  • SHA512

    5da9bc5d8f9b54c751ec8f0a704431b51426a3e3e753429e759365a1bbda6ece8f15894d163bc0182b2a0bcfc8c33ef478bd69bf2fd22118ad7f00f52137bd0f

  • SSDEEP

    196608:KSxt5g3vWwe9f/3R4Zq4V+3XcJHQvFLOyomFHKnPot:KSxrg3+we9XR4Zq00Flt

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2