Extracted

• • Target

    2025-04-07_f8dbd966e9d5d2592254be7f3c1a4013_bkransomware_wapomi

  • Size

    189KB

  • MD5

    f8dbd966e9d5d2592254be7f3c1a4013

  • SHA1

    8589d2410f4d914f705b05f548c04fb7176dae3c

  • SHA256

    4d454424a96f35d04848eb36faae779c44963880b728f3d46f208c6ae329abd7

  • SHA512

    954630c99abb08f3396678c1eaaf1676dfca4fa426df6a8d452b7dea55a632879af7d88f9134c8dfec9a37f75c676d629808ed5cd4fee568a8fb84cf7db5e6c8

  • SSDEEP

    3072:xrsd/71ZZZBMMfNenqnTcvhoVW2Qh1zQR6NPnahyVp82GCH:Fsd/71ZZZBZQqTg2QhZp8/

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1