Extracted

• • Target

    2025-01-07_40af4c7623a8b88a7cb103b40591730b_bkransomware_wapomi

  • Size

    7.3MB

  • MD5

    40af4c7623a8b88a7cb103b40591730b

  • SHA1

    dabbf0b3db0a0cbe3dbe13b98cf396768a550392

  • SHA256

    82e7fd42d3085e843f9e8aa6ce4d660d1c76a216027b466d18891ec77927648d

  • SHA512

    1d698d47f2e7249dbe737be9dd7101ddeddf344bbc69cf685a3b46a213f1d27c7539398285faa50fe6da2d296d4ff2919c554e079d3cec0f9d0429870da73965

  • SSDEEP

    196608:KSxt5g3vWwe9f/3R4Zq4V+3XcJHQvFLOyomFHKnPot:KSxrg3+we9XR4Zq00Flt

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2