Extracted

• • Target

    2025-01-07_05b3e65f8db67b719efe991d01069b21_mafia_wapomi

  • Size

    188KB

  • MD5

    05b3e65f8db67b719efe991d01069b21

  • SHA1

    e9aacf30ab7bd3ae84b1a7a031bf3c2e81c9356c

  • SHA256

    a410b4330a20950c6f502fc8281f8b4f2e2249faf47a0aefb7cce10e5c631784

  • SHA512

    1e965b1c31d8ac28d56da18019f69f99448a9e31df716cd40efef77b43e43b4ffa403d2e6685e1f15d056ede44b8c42b1517912b85b0b6908a37ed0e185cc355

  • SSDEEP

    3072:Djaz/kdH1QuA3rGuYt/ie+0T1ddxWTXOvXjfaz4WUSXpltz7GUd+w3wieCzpFGCH:LdHeuAbGuYVie+0T1ddxWTXOvXjfaz43

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2