Extracted

• • Target

    2024-12-28_53314d05a6bb29cac2e16e45c73a7cf9_bkransomware_karagany_wapomi

  • Size

    90KB

  • MD5

    53314d05a6bb29cac2e16e45c73a7cf9

  • SHA1

    5492920eb1a95d8c4d17082c6719d959c43bb7d0

  • SHA256

    c3e57fd7bba1fb2927a39a23d071ff7eecc6238cc9782398886db4a42f3d4b23

  • SHA512

    f6c866102078d678922420a4c4ca7d79e749ef5a13ff6c8f7d287bce7955ac8d66f65be41bfed95d17ec1aae6f1da64d1f27cf2faff0ea213fd69c80baccdfc9

  • SSDEEP

    1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8Ka2xGCq2iW7z:ov1/G5+L1C6SGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2