Extracted

• • Target

    f20cd66961b45d63540527201158e386fd41139e53bbbf032acc60ac4774f38c

  • Size

    12.0MB

  • MD5

    4b137f312a7728304f9f9f31bdc044bf

  • SHA1

    a7329f07aa7197348c744bc665fe78df5c3aa83f

  • SHA256

    f20cd66961b45d63540527201158e386fd41139e53bbbf032acc60ac4774f38c

  • SHA512

    afde317aa4c4ce4d6f143712df448b0dea5009cb50538c7e80e6688409122a51ab413a1bc51d1bf3b3c752c602e51823f1363b109f31f902e9e7c8d445072743

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z1FTCTMqQ:s/KU9/pyJx9Y5elZ0T

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2