Overview

overview

10

Static

static

10

fabce973a9...57.exe

windows7_x64

10

fabce973a9...57.exe

windows10_x64

10

fabce973a9...57.exe

windows10-2004_x64

10

Resubmissions

24/03/2022, 12:21

220324-pjqqysghd33

16/07/2021, 18:28

210716-3mtspqxy363

Sharing

Copy URL Twitter E-mail

General

  • Target
    fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57
  • Size 788KB
  • Sample220324-pjqqysghd3
  • SHA256 fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57
  • MD5 SHA1 SHA512
Score
10/10
bandookrattrojan

Malware Config

Targets

    • Target
      fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57
    • Size 788KB
    • SHA256 fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57
    • MD5 SHA1 SHA512
    Score
    10/10
    bandookrattrojan

    • Bandook Payload

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks