Extracted

• • Target

    2025-01-21_4279f32e8e8271c471120f2317f65b31_mafia_wapomi

  • Size

    1.6MB

  • MD5

    4279f32e8e8271c471120f2317f65b31

  • SHA1

    70884e8115fb5925d9c40fd55efe62f221fe96e1

  • SHA256

    a6865277d7df5014c6f15f87777cdf2687e9d80028c742a4c12313f5fcb5c9a6

  • SHA512

    2a2af9974b403ee38250047bdb1c4f8c7ede42c035d2c5b4442cf77dba7436117b008b7cef3783e74d14fb88e15825a03951b10187f3a7c657cc32ddce81da5f

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2