Extracted

• • Target

    605a6965f55929b5f7e9b0f00dd75f2fc6376d851b7205f3457ad04e0cf9837c

  • Size

    12.0MB

  • MD5

    699f7da8a2c3eb571a6b702db670bb87

  • SHA1

    dc4483f3ca882c676f094e34f15c6aa14bb92f62

  • SHA256

    605a6965f55929b5f7e9b0f00dd75f2fc6376d851b7205f3457ad04e0cf9837c

  • SHA512

    5e36efc7a7734a024b790d42be644d4cab4cdc589f3566f4601e65c6123c03533ad6bef5f5e9c8a15944d0de9f409d30f60760fb3b57b2c3b7ed5dc6b2af2bf5

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zuFTCTMqQ:s/KU9/pyJx9Y5elK0T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2