General

  • Target

    fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

  • Size

    788KB

  • Sample

    220324-pjqqysghd3

  • MD5

    e2bcd26465f9715da2789febce3bedf7

  • SHA1

    b3bd4d0c84d0751d88eb0343b8e194e499894a98

  • SHA256

    fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

  • SHA512

    17f6e5ebe109c652a0dce05de7ada1a0e3811f5558cf084398ece367a82f55fe1fd30797e20434db26a7d4245133e674db928c134c80f6e3297974f291c77219

Score
10/10

Malware Config

Targets

    • Target

      fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

    • Size

      788KB

    • MD5

      e2bcd26465f9715da2789febce3bedf7

    • SHA1

      b3bd4d0c84d0751d88eb0343b8e194e499894a98

    • SHA256

      fabce973a9edff2c62ccb6fdd5b14c422bc215284f952f6b31cc2c7d98856d57

    • SHA512

      17f6e5ebe109c652a0dce05de7ada1a0e3811f5558cf084398ece367a82f55fe1fd30797e20434db26a7d4245133e674db928c134c80f6e3297974f291c77219

    Score
    10/10
    • Bandook Payload

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation