Extracted

• • Target

    2025-01-07_24b6cb4a4e74e31d75456cc3d43444da_mafia_wapomi

  • Size

    1.6MB

  • MD5

    24b6cb4a4e74e31d75456cc3d43444da

  • SHA1

    682f244e75e459b5a483157b43138cb5b0379c33

  • SHA256

    eb15944ffc429eedfedaae8f6bf4f72ad0a77756ee45cd3e29d1e300d9b5a47e

  • SHA512

    b21d78466f2967c8f0a37b32173b8ab1c57d142d4e0d2a38073c749633dfdc99469a6263eccc4d08a70c9ed3180e9eb953479acf9ab0353565c38d0237226d28

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2