Extracted

• • Target

    2025-01-21_d2bd025e2e3d5eccd6069b5738a1155d_mafia_wapomi

  • Size

    1.6MB

  • MD5

    d2bd025e2e3d5eccd6069b5738a1155d

  • SHA1

    c149888391e4de0fd722b08e82ff5c77575e67d5

  • SHA256

    8838ce0fa220a5c41edc3aa6a11eb4e9998803133ce5b782d8e05eeefaa5b5f0

  • SHA512

    500b82050f5c2159c2d0eb85ab661a83b82271b6d0b902e4fdc4bd0b1f1068b13683b09473b8648048715c4ba19a4a54593e5c45331e1cb188f96a7fde1d37df

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2