Extracted

• • Target

    2024-11-20_7fa3bdbd1f02ac2f8f5213e1761cdb1d_mafia_wapomi

  • Size

    1.6MB

  • MD5

    7fa3bdbd1f02ac2f8f5213e1761cdb1d

  • SHA1

    8dfbddc23c128c068e0f92efa1f72b8d50c1ee72

  • SHA256

    b31edafa396276295aa8ddfbedc53c91cd8692451ce51232bf1af3530d8ccce0

  • SHA512

    105a196861228ec2627ad5d0b21de11957832fda5e6ecc3c33dca58ca4e9ecda5c5d857dd2fff26d514b5fb7edaaf38f93bd1826e0118baab0018526bcc005e1

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2