Overview

overview

10

Static

static

Cancelar Factura.exe

windows7-x64

10

Cancelar Factura.exe

windows10-2004-x64

10

Resubmissions

24-01-2023 19:33

230124-x9v3csdd45 10

24-01-2023 19:30

230124-x7w7msfa3x 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Cancelar Factura.exe

  • Size

    2.9MB

  • Sample

    230124-x9v3csdd45

  • MD5

    5c3cb19563848d0bee7238a6bf55abc9

  • SHA1

    766737ca6149bcd018ef7cfce49b3b90fe0325d9

  • SHA256

    c1c7a5fe3203fe7ecd6b4581a12f85803174d5e2b8df2e98cccb8a5d740b1d36

  • SHA512

    bbf31136b59edfc1c630a96e348a20d7f494e999534e19aea565ca9c2f074f27be8bac27ccf07165c5f025daa955741a131424250a543d83e6e46fed2af44341

  • SSDEEP

    49152:Ofc6jhQyaOKBcZt7MUt0dfwwWC1R9Jbl8/u5K:O062yaOt

Score
10/10
bandookpersistencerattrojanupx

Malware Config

Extracted

Family

bandook

C2

bomes.ru

Targets

    • Target

      Cancelar Factura.exe

    • Size

      2.9MB

    • MD5

      5c3cb19563848d0bee7238a6bf55abc9

    • SHA1

      766737ca6149bcd018ef7cfce49b3b90fe0325d9

    • SHA256

      c1c7a5fe3203fe7ecd6b4581a12f85803174d5e2b8df2e98cccb8a5d740b1d36

    • SHA512

      bbf31136b59edfc1c630a96e348a20d7f494e999534e19aea565ca9c2f074f27be8bac27ccf07165c5f025daa955741a131424250a543d83e6e46fed2af44341

    • SSDEEP

      49152:Ofc6jhQyaOKBcZt7MUt0dfwwWC1R9Jbl8/u5K:O062yaOt

    Score
    10/10
    bandookpersistencerattrojanupx

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks