Extracted

• • Target

    2025-03-20_97ff8a7df7550d0dabb17f18af144be3_mafia_wapomi

  • Size

    2.6MB

  • MD5

    97ff8a7df7550d0dabb17f18af144be3

  • SHA1

    735658014ddec0ac7f331dc74f6b0b41f6ffb3ef

  • SHA256

    519a38eaec71237a4931d1be5239f55fcfe5cca6fc64856527e195f697cc5427

  • SHA512

    9acdb9169588f80896b6c156a39ff7837d35362d93dd0f9614a4ba3605824b7a292835f4c1f6d3f23c1904284dbc6680395225a4b4931b76d819fe2016c078c5

  • SSDEEP

    49152:3QKb4dZQkbffe99tB4qvJA44TNYE1Wp7KrDNHuUS4tdK+DcKEZZxeT6TToNw18:5cdZQafc9cqvJSTNYE1Wp7KrDNHuUz1R

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2