Extracted

• • Target

    2025-01-07_0d3c054d7fc4581caf574f357075599f_mafia_wapomi

  • Size

    187KB

  • MD5

    0d3c054d7fc4581caf574f357075599f

  • SHA1

    4b61c1522562849c4e07bcdc6319aa2a5391f51b

  • SHA256

    cea8bddd87f77fb002366fd6c749949eb1bf46e4c0d4d4c395f58ad2b8376e85

  • SHA512

    1815a34b5fe71be9084a038e2b920b0cce91b8e10267eb8cafa6e776213159f62a2a78d858d69ed0c9f629a0248ab199501c02c7987db079e2fbab84616bcee6

  • SSDEEP

    3072:tLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6d4n3meIOJGCH:z83YLmUOFXEEZnRCI3AXny/Hj8LG4ujR

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2