Extracted

• • Target

    3b1e0129822e85c13f706e708f866f337458a59092431d35e29fa9da48f7ae62N.exe

  • Size

    296KB

  • MD5

    f304c9e1409515ce83feddd75b11d5c0

  • SHA1

    c395a06392c1cfcbcb3bd390f2d5f919ec18af00

  • SHA256

    3b1e0129822e85c13f706e708f866f337458a59092431d35e29fa9da48f7ae62

  • SHA512

    bccebf7b19231e50415556d10ccf4fb9875a93fdaa3973da44fd77b653d5572b6ec611b969c0d5e7b429db32676dde6d3e4b219a16741aea6b4140be04b45ede

  • SSDEEP

    6144:7MDcW16ZwIJssQ8Uy4UcYZVTc2rPzjJOHAOgxqqDLu2l:7MDV1EEd+4UcUVTjPEHRqnu

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2