Extracted

Extracted

• • Target
    sub_e5824681466b.bin
  • Size 216KB
  • SHA256 e5824681466b0a8b36f470252d644bc5a4333d83a8987021df491b471ef8d473
  • MD5 eee333c1637253245c3fc51775ba7395
  • SHA1 bd111eaf7f7687a87de02aa87acdde9d4cd51eb8
  • SHA512 c3ad219bacb1c7fc2feb98848bbf61bd559ed9c6ec2ebfb9d4d7380fcd7b34a4f895be7b5f3ac3f588add74bcd8a4cefe6a9b58ad73310e862030ed0f942e087
  • SSDEEP 3072:efUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIh1Xi6FLPo3cCGCH:efUauY68uSWCx+XA7mg2pNQ1Ljo3cj
  • TLSH
    T190247E30BA90C035E8A3107CD9EE86BEB96C7A301F5950D3A3D44A662F716F27E71257
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoverybdaejecoskiinfostealerspywarestealer

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Family: Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2