Extracted

• • Target

    2024-12-28_9925abc76c4c7092510d03a7c68190bb_mafia_wapomi

  • Size

    187KB

  • MD5

    9925abc76c4c7092510d03a7c68190bb

  • SHA1

    d5dfcff82e40eaa2e8b697fda923c23367e04afd

  • SHA256

    bb5bfd926f5555627eea5b147ada42aa200459ea97390598a2f1a92720cb1514

  • SHA512

    cf9f67c0bb4e2c60899d95ab2fdc56ee608500802ec34bc567df3c89a00ddd82771713135519359dc66819c8720c9c26e0274cbe6aeca250aac166b99c177c48

  • SSDEEP

    3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOCGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4uj2

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2