Extracted

• • Target

    3628e80c7ce63cfada9ee5c4231393d0a283309e7208f12116b2295addaf8471

  • Size

    2.0MB

  • MD5

    5f38412e07d5697dc9c97da57395593b

  • SHA1

    c71e84a02d656943952ecad34e25bd2093ddb17f

  • SHA256

    3628e80c7ce63cfada9ee5c4231393d0a283309e7208f12116b2295addaf8471

  • SHA512

    62436735f000bf3c32c1d2b9a858ebcddf84aebc45650a22835497b515934c023123fa8d1af781696ea9a3501bae1dcd2baae8faf24dbfe79ad4f5350a7718df

  • SSDEEP

    49152:x/iXoNhoGf+wkkkZnLuy85vXukLfLqGh4vl:nGGAnLur5vX9TqA4

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2