Extracted

• • Target

    9fab99e2ec8a34711ca535222d979394592e30bf676472de80481fb85c466d31

  • Size

    12.0MB

  • MD5

    b9210f16333ed8ef76ff931158673e2e

  • SHA1

    cf34faca954147adc1a54a7f4c85349e0758fd5c

  • SHA256

    9fab99e2ec8a34711ca535222d979394592e30bf676472de80481fb85c466d31

  • SHA512

    ca6c0c1fb990691357169e4c7f2df5df51990827ab2ee904279dbb9a0262b47752e8bd7ee50399e9c45d01bba48638bdda11637bf4a1249da38a30c984619b88

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z4FTCTMqQ:s/KU9/pyJx9Y5el00T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2