Extracted

• • Target

    2025-03-21_8f197db04a1314d743ae11b26f8ab5b6_mafia_wapomi

  • Size

    1.6MB

  • MD5

    8f197db04a1314d743ae11b26f8ab5b6

  • SHA1

    97e82650497208282cae5ce33f0226e5975bffcf

  • SHA256

    d0d0dca05c550a0e80d18017c24418abd70b33b1746d841a6221bc3baae88373

  • SHA512

    a0f68cb65914e983927b5de50040745b77e7b8140046844c2ba5361265b8767a266786b2fe1eba85e42543422b4cfeda6b39755b116215d24a1a9f2cca78cf10

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2