Extracted

• • Target

    6b518ce4347bd443899013394cdb4e2c0cd7782335953ad94c3ed4577d0a0cd3.exe

  • Size

    141KB

  • MD5

    0ce7cacaa49d6b4111977c1844f8182c

  • SHA1

    d08c0fdde6b1bf32ed7d8d193ec4b73bcfee3cc1

  • SHA256

    6b518ce4347bd443899013394cdb4e2c0cd7782335953ad94c3ed4577d0a0cd3

  • SHA512

    2b7a48387179adefe4e0ac25e976b1c7995ae37223f529d21f018e96553cdfa03c68cd495f4c9fd9f3bc7fcdaa1b4cd81c1a5afc09fb1c21d8f6d3837c187556

  • SSDEEP

    1536:BKnrXO3fbLMkihYSVRHSKv2UV9MsPJ+ff0XdBch52KYopz871GCq2iW7zu:B3TLsbrR3V9JZtS52KYopz85GCHi

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2