Overview

overview

10

Static

static

SOLICITUD ...D5.exe

windows7_x64

10

SOLICITUD ...D5.exe

windows10-2004_x64

10

Resubmissions

27-06-2022 14:10

220627-rg151sbggr 10

27-06-2022 14:08

220627-rfr6qabggl 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SOLICITUD DE COTIZACION_20D5.exe

  • Size

    1.8MB

  • Sample

    220627-rg151sbggr

  • MD5

    732717fb963205cdf2d23f4a177fcfcb

  • SHA1

    f7bf9ce224c48c33208f896b1bc7b8b90f3accd1

  • SHA256

    051495d208bad010334f14c162600b66c7ef437ae3f6bd037e39bbfc4ccdb415

  • SHA512

    3761cbb98c804fd7194896249eb3545281dbc410f7a3e129be9dc5f29d2dd9f6bb730449c373b6179f363cbac45b40e500cb989762a31380b8fce57b5942cd6f

Score
10/10
bandookrattrojanupx

Malware Config

Targets

    • Target

      SOLICITUD DE COTIZACION_20D5.exe

    • Size

      1.8MB

    • MD5

      732717fb963205cdf2d23f4a177fcfcb

    • SHA1

      f7bf9ce224c48c33208f896b1bc7b8b90f3accd1

    • SHA256

      051495d208bad010334f14c162600b66c7ef437ae3f6bd037e39bbfc4ccdb415

    • SHA512

      3761cbb98c804fd7194896249eb3545281dbc410f7a3e129be9dc5f29d2dd9f6bb730449c373b6179f363cbac45b40e500cb989762a31380b8fce57b5942cd6f

    Score
    10/10
    bandookrattrojanupx

    • Bandook Payload

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks