Overview

overview

10

Static

static

10

fabce973a9...57.exe

windows7_x64

10

fabce973a9...57.exe

windows10_x64

10

fabce973a9...57.exe

windows10-2004_x64

10

Resubmissions

24-03-2022 12:21

220324-pjqqysghd3 10

16-07-2021 18:28

210716-3mtspqxy36 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

  • Size

    788KB

  • Sample

    220324-pjqqysghd3

  • MD5

    e2bcd26465f9715da2789febce3bedf7

  • SHA1

    b3bd4d0c84d0751d88eb0343b8e194e499894a98

  • SHA256

    fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

  • SHA512

    17f6e5ebe109c652a0dce05de7ada1a0e3811f5558cf084398ece367a82f55fe1fd30797e20434db26a7d4245133e674db928c134c80f6e3297974f291c77219

Score
10/10
bandookrattrojan

Malware Config

Targets

    • Target

      fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

    • Size

      788KB

    • MD5

      e2bcd26465f9715da2789febce3bedf7

    • SHA1

      b3bd4d0c84d0751d88eb0343b8e194e499894a98

    • SHA256

      fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

    • SHA512

      17f6e5ebe109c652a0dce05de7ada1a0e3811f5558cf084398ece367a82f55fe1fd30797e20434db26a7d4245133e674db928c134c80f6e3297974f291c77219

    Score
    10/10
    bandookrattrojan

    • Bandook Payload

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks