Extracted

• • Target

    2025-01-21_ac9759d74fc8237f93b029901d6ba32f_mafia_wapomi

  • Size

    1.6MB

  • MD5

    ac9759d74fc8237f93b029901d6ba32f

  • SHA1

    cd8965518734d3617748748a2cd1538c3c46ace5

  • SHA256

    2f11319fb8bb0465cfa3ddef7c814eb894d5137ad999804e2a06c5f903b9ef98

  • SHA512

    a754d5badc2e4978b1449a09351932a3c47b1d43cf8f3391c88dc72eacd388ac4a9adfeee8450bd6fc89c946a63cdd3a5886bc9d0b828e79895fb026fada4673

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2