Extracted

• • Target

    2024-12-15_14b4666448134224bfd44d2f6c248872_icedid_wapomi

  • Size

    14.9MB

  • MD5

    14b4666448134224bfd44d2f6c248872

  • SHA1

    4ab14ff17dd9dafabdf3ab131eda4735f85920ee

  • SHA256

    5a848fd4e07bf7a3cb43bd6a603f1fe890a90c37d63f54f53b8c8e7948d53242

  • SHA512

    18c756db39a72160e3714a69281d86195ed7069e128afce43756c0d3c55d633674cd5b06d782ff7ff0f4c2490b7c992533238cb9178b4536d0f0b3aa802b2548

  • SSDEEP

    196608:RWzxiAZQGSVyUxHOmzdUG35rZODxge3Hub7WLvlAXOpKwdou2rTX+0O/:AqGSVRHT2GprZU3eUvhKwdoPX+0A

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2