Extracted

• • Target

    4645c7dc1c0a6b92a458b3a1abc5f755306c9e5f32154857be7ebba93357daa0

  • Size

    948KB

  • MD5

    267081bb9feeb631e66e4b550d52218a

  • SHA1

    384b1ce104f8a71fc668d16d870c30843966905f

  • SHA256

    4645c7dc1c0a6b92a458b3a1abc5f755306c9e5f32154857be7ebba93357daa0

  • SHA512

    2f2fd0f4998d56a3301a0792c1bb07bffa7c5d40c92f74cafb692fcf0564b9b713840aa52ae7a6dbad210a1dc97b16d80c4e337722d69f03dcc5817e63842710

  • SSDEEP

    24576:d6tNfSHgPOvaCrfqGo3PnHgKYD0GegB0UBNz+u:G0vaLPAKYQOZNC

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2