Extracted

• • Target

    2025-04-09_e3895029dc03c0f356e3072eba92837e_amadey_avoslocker_black-basta_cobalt-strike_luca-stealer_wapomi

  • Size

    164KB

  • MD5

    e3895029dc03c0f356e3072eba92837e

  • SHA1

    b9cce59c9306e6cf27cef672cb6df97e26cc1aca

  • SHA256

    79f951bf122dab21bc2e115914a2afd25fce66fad1bff2f9d80ce7a026b6e642

  • SHA512

    cbb0ccfad00cc3e400a1cfb1d717ce49dc593adec9e5f3a49f77a07b288c37dc7f1b4632203824b1cfbf5ea8321a0b9ebfd0323fc0cd1eacab3def9416ec8205

  • SSDEEP

    3072:h8nH9j2ziuvAaIBlCn24Rc4Yn0NJKckH2Fe7E29A/zdGt69heo4JeGCH:hyR2zi7ajvRcGLKZH2FaLw9hH4J3

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1