Extracted

• • Target

    2025-01-07_95983cc5bbbfb2a10a812498976b3f60_bkransomware_wapomi

  • Size

    215KB

  • MD5

    95983cc5bbbfb2a10a812498976b3f60

  • SHA1

    9b7bb8cd7db49f4502e20a97adc04d878353a5d9

  • SHA256

    430831eef07d5f484ecd42bd57b4bafc6e90c7ca9ebac5570cecc3edb7e3b614

  • SHA512

    767e8255dca633ea88bc8ba7720d5bc0491f04d0bed96b26f29c5c1d99a933eb51ca60516db579a45d4c193c6271adcd7510f7fcea54f2e7de52beccfc001525

  • SSDEEP

    3072:J666SmGgfYMSLpt690G4EHI8FeqvrvuSUdyfQHoAb3MVD+Q3KLGCH:J2SSI60GhHvjv1Q83Ky

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2