Extracted

• • Target

    2025-02-25_9499dd9710b8da15cb6943558e627295_bkransomware_wapomi

  • Size

    7.3MB

  • MD5

    9499dd9710b8da15cb6943558e627295

  • SHA1

    47bb30ab8031e4436f241926457fba40a7aaacfc

  • SHA256

    1d115f3894eaaae39d5381962c5939ba4e99652588374800ce996af14fd2feb5

  • SHA512

    41b7aec2ed7e58bf427e6c7aab22a59d3107f3e066879b119441e622363f7647dfa217908bd70176e1a14cb4bd26c2bce9f9588f2b53b1086551ce0cc1ca2f11

  • SSDEEP

    196608:ISxt5g3vWwe9f/3R4Zq4V+3XcJHQvFLOyomFHKnPot:ISxrg3+we9XR4Zq00Flt

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2