Extracted

• • Target

    2025-02-12_7dd9c4b12f200f00d10f4e0e805ab02d_avoslocker_cobalt-strike_luca-stealer_wapomi

  • Size

    164KB

  • MD5

    7dd9c4b12f200f00d10f4e0e805ab02d

  • SHA1

    b9b8274beca2efa279189ac9bb8fe0d7addcb067

  • SHA256

    ea921b12fc684f16fbbac08a981837245abb4e162efec2be4b8d66f1f9b6f097

  • SHA512

    d62ec08b5e95c143b5dab0c7a80b24259c8764b7445a57e830ce91194e6e89303a1e19cb335ba2cd8f66a2e952f058b94ac11d0d33ae18a1c4840c3d8013d679

  • SSDEEP

    3072:h8nH9j2ziuvAaIBlCn24Rc4Yn0NJKckH2Fe7E29A/zdGt69heo4JdGCH:hyR2zi7ajvRcGLKZH2FaLw9hH4JI

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2