Extracted

• • Target

    2024-12-28_72ab518691b49a4ff5c967409276657b_bkransomware_karagany_wapomi

  • Size

    98KB

  • MD5

    72ab518691b49a4ff5c967409276657b

  • SHA1

    6bf017adadd4a5fa5b59a30d3c0ec7c683cee43d

  • SHA256

    435c5d7c5fc0897ee22196dea3a6d403bf5c5f8f01c423b4fc9bf7b5c650ed7d

  • SHA512

    0d64b76083d8ff485001af3ce6404a5ed44417cf965db3d747e5ddfc191cd621c91dfb71caa0fb4041fc794e6d2fe516b7a1fad65221cdf045c26783cce5862c

  • SSDEEP

    1536:xlbzRLkKWDmJJifu5IksCt5IKygvQPcCsWjcdSXciPGCq2iW7z:xxFqyRmksCRykQ4SlGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2