Extracted

• • Target

    4334fbc0ac72a47628bb24c5b68aeeff36db0017bee1ba00b795fd8381c05d06N.exe

  • Size

    146KB

  • MD5

    b857da006456d70eeed1d8077f0efc60

  • SHA1

    dd4bd601fadb9837466dfcce8b4711bba2986315

  • SHA256

    4334fbc0ac72a47628bb24c5b68aeeff36db0017bee1ba00b795fd8381c05d06

  • SHA512

    03fa5286f87871752a11978478da2020e5b8259eccd03fb61c9d81031df374301a1d87ba16359d10fe0aa8296231eb0d30ad1e0e224eefecc7acea9597353da6

  • SSDEEP

    3072:EEO9aq9pOM5nMCGJri8OioDw7LC89IAFF5J7P03xGCH:EEO9aq97nkll5Vc3k

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2