Extracted

• • Target

    66db676de6d828518d98bb7fd27eb6d437d0c97f909a6bfad2cf6d471368a1cfN.exe

  • Size

    1.2MB

  • MD5

    95ea3838774f56bde48c33c8af0951d0

  • SHA1

    0e39fcf7c226c92e8a04237787d80b96b0322574

  • SHA256

    66db676de6d828518d98bb7fd27eb6d437d0c97f909a6bfad2cf6d471368a1cf

  • SHA512

    4f591a97dd5c56cb8e3841039aede5e6725d4a622339017e43c8ef8802fa91111ce0736356d4d6677f797d547ad8142ca886d20664797df64922af2180eecccb

  • SSDEEP

    24576:d7GO7dtrjrICw9XuXo7beSTdt5xbX01uvfTXfBxr93d5E/jKQvVj4YpdjYY0td78:8EtnrICSooGSTD5xbX012fjBxr93

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2