Extracted

• • Target

    225ae7e559927f217d70a4773ee6d6a36638d407e6f15304e8cfb91a21e0074bN.exe

  • Size

    930KB

  • MD5

    4ff422aaf92192acde1d014cc7fc8490

  • SHA1

    c7a1d01c21bdb07143a59e591d481ffe26705ced

  • SHA256

    225ae7e559927f217d70a4773ee6d6a36638d407e6f15304e8cfb91a21e0074b

  • SHA512

    7c8dde9e265bb6ce2fd7f7211a988e3e744101ba50016d02814724aea125085639c7b2e49a3fdedd68a02293be4969bbd853d587b984cde3597104617bb95ed9

  • SSDEEP

    12288:hr+/U0UAQ0QkiWNlyxRCugvijhCWTJUuD6q9RIHwjMj+F8ii6JqgkYUV+I7cKRg8:hqBUAPiWNA0vijQWquD2wjqIO6lnicK

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2