Extracted

• • Target

    d110e6de4b38918e2e3d4209ce6955f3774d364ab5fb73035f372e3f886ddeef

  • Size

    12.0MB

  • MD5

    9a7724d73c13c742c682ed1dcd693b19

  • SHA1

    6894306192abe027a3a8d44f1cf04affd8db8f3a

  • SHA256

    d110e6de4b38918e2e3d4209ce6955f3774d364ab5fb73035f372e3f886ddeef

  • SHA512

    31d0c52a8d878ed2ef03397e48175afff48a0371d1ead28ad681eed3150ff7eed5742dc5e3aa2c63d2f88daa7d620a86c1e529b63b0220e9e1082897d7af62a3

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z8FTCTMqQ:s/KU9/pyJx9Y5elQ0T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2