Extracted

• • Target

    13ab8cfdcc0c769e9722d906b79ff358d90d330834127f7ec6e117927e12fb09

  • Size

    12.0MB

  • MD5

    2a0ab071bd43b71801e0d1aed778c27b

  • SHA1

    5167f863d83afe9f1065a335f385aa3ae8a19383

  • SHA256

    13ab8cfdcc0c769e9722d906b79ff358d90d330834127f7ec6e117927e12fb09

  • SHA512

    3e602541a0afe05cf04ba928ec2b480c50cf0ab0a058218f89afc39ea0e6c895fb8de47e6d31594c5b17236cf293c5406c3c1580fc216a6659a5a696e9c30c19

  • SSDEEP

    49152:ug17vyyo6chV9wo4CrxdEOtBT8v5vFLy1HTJsZ:ugBLo6EV9wo4of8v5v1Yls

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2