Extracted

• • Target

    2025-03-20_f154c8e7b92c66929392b1bfa78e8199_mafia_wapomi

  • Size

    1.6MB

  • MD5

    f154c8e7b92c66929392b1bfa78e8199

  • SHA1

    e08e9c1c2a1382239078c771984911fff1335537

  • SHA256

    64076a9a8210e45d3c7c72d0e2972e736b8bc7eec3ac4ba8694d36cbe9a6506a

  • SHA512

    d6d48e358e1637ead564ada07414318dd763d7aef7d6d329a3e95c9588abea768b40e9cd88ef87d1fec35706ed87cd25a53e70a771b0c10db05a2f50369367f4

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2