Extracted

• • Target

    2024-12-01_b665fc48ad4d0dfa56ab72fe72c40875_icedid_magniber_wapomi

  • Size

    16.8MB

  • MD5

    b665fc48ad4d0dfa56ab72fe72c40875

  • SHA1

    b8143baa1616ef1a08f9c7e74c8dbec480347ef4

  • SHA256

    5618fdd3398e3ec06afb198feb4df844125c6537e48d6b22f5ea6f9d6d749e22

  • SHA512

    ff9176cb6ce0c15f143a210be7bd35e5c40a3d823c6b1bf95838198f35738327795b806150304d58e3616f2a042b324ec705fc0682313c795fa04271747eaadb

  • SSDEEP

    393216:H8jzneFnE8qU6GOjQoxasPp8qgSmIbr/Asb8nmF:HeLkKlkdIb8sYm

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2