Extracted

• • Target

    2025-04-07_f850b80e8b59a70f26b11c4d0be99887_bkransomware_rhadamanthys_wapomi

  • Size

    156KB

  • MD5

    f850b80e8b59a70f26b11c4d0be99887

  • SHA1

    cb4c61114dcd89968f8a4e5ac671c319c736239b

  • SHA256

    0e4fc57c5e7cc0be1cb61fe8c08cea6607fb88acb0c8102cf46036a7de1cc5f6

  • SHA512

    f27940a4d98983886f3366601dca6dff8bae3d8dd2584468b0104c351b625b3ca61f8f5ed2352f73059d13be949ad50cd81dc82399a70f8c88721c4e6e5f0e6a

  • SSDEEP

    3072:O4s6ByyhvJzUlKd+44tH0FY1kGBJlN5GCH:O4sYvxJzJdhFY9vN8

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1