Extracted

• • Target

    2024-12-05_615bcd56ce65e0eda6c19530a954eea5_icedid_wapomi

  • Size

    16.1MB

  • MD5

    615bcd56ce65e0eda6c19530a954eea5

  • SHA1

    889dfef3ce1d48a691539ec5266fba63288dee5d

  • SHA256

    d2c3d8c690b65e8474272091a6f1333fd99b3d07075139d0e64ddbd2119f4745

  • SHA512

    cd4a0e639195f8efcc0f909c232863ba556eefb5a110cb4308757e7e5d2e7384539fbc8d2930e9ee7597d1b7b2ef95e5ad5cd8900f19662e7fdd27974a933ea5

  • SSDEEP

    196608:rChfrM1nKlUUphMFdvADFJld2PczqUG1AZqkckhFaJVRWEw:ofrM1nNUphMFdvKJD2PKqUG1AUkHFah

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2