Extracted

• • Target

    2024-12-28_37de5a956fb6e37766be8aec9f7482a5_karagany_mafia_wapomi

  • Size

    120KB

  • MD5

    37de5a956fb6e37766be8aec9f7482a5

  • SHA1

    fa550f04c79f8f854fadffd2eede2227a36a13d5

  • SHA256

    e4e7fcdea4b4b24559ff9ea53190634892105b911015e954fb517c1de91494fe

  • SHA512

    8bdbb239117810ec4d7f28c0d5c640ea794d4c0cb1655c8fb246b845f2405edaf3f1888eefe7a1ecabf0a1abce139f0519ef023c8ff64301242df71de4521711

  • SSDEEP

    3072:FOzAt7oScwptXd1PS7U4j4XuKnwEGGCH:FP7ZtXTateu3EP

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2