Extracted

• • Target

    2025-01-07_317a818c5d14531745cc4d25dc991d22_mafia_wapomi

  • Size

    188KB

  • MD5

    317a818c5d14531745cc4d25dc991d22

  • SHA1

    464213b81c406b950fbe4b23c5cc50b19f3a4190

  • SHA256

    9dbd633c1b52bc9c762a68036b6cf8638e25b38d11c7c8302d2944aa655b2ac2

  • SHA512

    8ca319de0d8cf0ffd56fb2fcf879c9ee9ff838b8d5ceb5684863d29f9d6569f4726b2622c69301fee6dec5206ab7d23d15c2b065ccb251a73185b602d6ddf4e3

  • SSDEEP

    3072:Djaz/kdH1QuA3rGuYt/ie+0T1ddxWTXOvXjfaz4WUSXpltz7GUd+w3wieCzpfGCH:LdHeuAbGuYVie+0T1ddxWTXOvXjfaz41

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2