Extracted

• • Target

    2024-12-02_ad3c818557b8156e16c35b568f8b83f8_bkransomware_wapomi

  • Size

    168KB

  • MD5

    ad3c818557b8156e16c35b568f8b83f8

  • SHA1

    716cb076d3d90ba16d24594b6648c28c43ad4e7e

  • SHA256

    3a8d3231d89d733c1a4f5cd1f44eef14f31bd286682e44bc4ccdd63e40ee7cc3

  • SHA512

    20d2b6eae10ef8166b7f85a85b86b7e18281c67673c7287f0a573d9b6c764c8c89a0246355f6ab09e410860c2cb0195b969599b7112387353414cf6b0da29fdf

  • SSDEEP

    1536:W6fZO3jpPdcwLF5zrfQ2erSaMrb4W5QTq9gQf+PcQdqbmsWjcdrnYNY1lme4OtBP:WIe7RUwFrbsa+74bJzYNY1kGB+PqGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2