Extracted

• • Target

    Factura_Reporte.exe

  • Size

    2.8MB

  • MD5

    aa572e73d2e8dd37ca43ca7d8a046840

  • SHA1

    de467ab0c6078e92a5e0a659c2c81c42870d0f4c

  • SHA256

    7101fa8a59eee4118980fac6c580e435b0e838b8dd3546ad9e87bb26cbdd66c5

  • SHA512

    9b8d8c2fb83bfc704f63711cce75ccbf427e08f8c15d40fe1e3d92a18188ff3df572cda29e98c64ae2b955708ebcb4babad6cc41c7db9e5eaa3c7363eec53dde

  • SSDEEP

    24576:tf4VBO+XL5EtJhVTp+52oIYwF2BT6rk9PsMdb0DPRyMm3F9UAv0r2xp4loQGS7MR:tfQcmTNrSwPXcr1GPDBGXTP1z5uM+W8/

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2