Extracted

• • Target

    2024-12-26_9554b1bd8310387ca2622f7b2f19a3fc_mafia_wapomi

  • Size

    1.2MB

  • MD5

    9554b1bd8310387ca2622f7b2f19a3fc

  • SHA1

    5252a01bf06ee27f83e2f1cda4472bba740181c3

  • SHA256

    161b5a9456c3bdbe892fffec5293d0b44c6dbe34e120e32d06f9d209912a22bf

  • SHA512

    16f38ef7866fdbd69d9a72da9c4a4af57e535b8b609955dd1ff05582313084e0a2ee7f1add135fd3e2f3b01e4a0d7a8bb49e1faca5fc02525b066b3f97f6e655

  • SSDEEP

    24576:Bvt509XOA2NMW8NJiJ9A99JK45yWl8pHu1FxU5A2qH:BvY9XORNMW8NYJejJLzIu1FxZ2y

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2