Extracted

• • Target

    4bd2f4009a66bbbbe1e5063df70d3a31c18633e568d4cabf4948d739c1a4fadd

  • Size

    12.0MB

  • MD5

    e6c6fdbcee4a347a0222db7190eb1d02

  • SHA1

    cd0e803b7c21cb2d945bcfe7fe2c08797c462bb1

  • SHA256

    4bd2f4009a66bbbbe1e5063df70d3a31c18633e568d4cabf4948d739c1a4fadd

  • SHA512

    da94f621d3fc1558aa2a88dc4399e9e362ead62ca6bd0aea99d37db3a9c47cf34ddd3cd9b99824afb86aca19c1828e3156a5af973c0b0fa378ad047e81d0ef95

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+znFTCTMqQ:s/KU9/pyJx9Y5elr0T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2