Extracted

• • Target

    2024-12-25_0b6bb7471977027d3dffd39c40d1f2f1_mafia_wapomi

  • Size

    187KB

  • MD5

    0b6bb7471977027d3dffd39c40d1f2f1

  • SHA1

    c661807a7be8c9d08c7c482eada45b42e932529c

  • SHA256

    32e5bef88b4dbbf9eb0fb02411647bf01e91eef1a51a913543be498b50cace2e

  • SHA512

    b3b6307cb3b10b4622bb5044c2ff11e03e23001d20b6f215761d82a1d3386cbf64e4f5fbee031d617772ed1f07bdee855b8c9215ec4983cb61062bace2f500bc

  • SSDEEP

    3072:tLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6d4n3meIO6GCH:z83YLmUOFXEEZnRCI3AXny/Hj8LG4uj6

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2