Extracted

• • Target

    9b1cb48ed91b98d32b6a9ca70013154967f312b848a3bb28888345c2f1e25b69

  • Size

    12.0MB

  • MD5

    d164266b0d36285a526cb2686a053d05

  • SHA1

    a538acac544379ac205e3ebb6b67dd85c0a08667

  • SHA256

    9b1cb48ed91b98d32b6a9ca70013154967f312b848a3bb28888345c2f1e25b69

  • SHA512

    7ef006eb29c2741aa1be702404f41f9b09bbc797607a4a419a3f1fdda84b35d279d5dd29a7d805bc45f44c3b32223ab6614e499dd3c92a0b3f502498a47bf188

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zsFTCTMqQ:s/KU9/pyJx9Y5elA0T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2