Extracted

• • Target

    2025-04-07_b1dd3653d8239c14852fc119a3d1e177_bkransomware_karagany_rhadamanthys_wapomi

  • Size

    90KB

  • MD5

    b1dd3653d8239c14852fc119a3d1e177

  • SHA1

    12e14d311c547395fe185eaa9a08da1ae602a2e1

  • SHA256

    a890bb5c61f478c69d2dfa4645ae00f811f79a2b04d5e1b32a6ce8ffe09598da

  • SHA512

    97d976adf0de8fa75f7c4f5d560af3e807b76911738790399cec7336ae1b45c5acac2002989c303881400a768ed50a862ad246c55354fda2f60f9bc9ea32d410

  • SSDEEP

    1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaeLGCq2iW7z:ov1/G5+L1C64GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1