Overview

overview

10

Static

static

10

1a2ff4a809...04.exe

windows7-x64

10

1a2ff4a809...04.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a2ff4a809b5a3757eaa05dc362acb2b227a7d02cb13d74c17d850d44181cf04

  • Size

    4.5MB

  • Sample

    230223-pqwwjshf8s

  • MD5

    10188c31ac960f60430b166d3d12b07b

  • SHA1

    3ff77fb2fa2b4b2c3e519947d8722d22c882cbde

  • SHA256

    1a2ff4a809b5a3757eaa05dc362acb2b227a7d02cb13d74c17d850d44181cf04

  • SHA512

    6f22a7277c27d4aa41f18af23400bd0416ee272aaf6380fa27c620a7200c601c61eae286ab4927b21f2cf4979289580d9252cd2527772cc11ce3f752efba4c05

  • SSDEEP

    98304:Ny8dhpdcOxS1zarMeCwmCeMQeRaCNEKpQ0wpa5SwTaPlaEfdahqN6lNwWug7wKe5:gfzarMeCwmCeMQeRaCNEKpQ0wpa5SwTq

Score
10/10
bandookrattrojan

Malware Config

Targets

    • Target

      1a2ff4a809b5a3757eaa05dc362acb2b227a7d02cb13d74c17d850d44181cf04

    • Size

      4.5MB

    • MD5

      10188c31ac960f60430b166d3d12b07b

    • SHA1

      3ff77fb2fa2b4b2c3e519947d8722d22c882cbde

    • SHA256

      1a2ff4a809b5a3757eaa05dc362acb2b227a7d02cb13d74c17d850d44181cf04

    • SHA512

      6f22a7277c27d4aa41f18af23400bd0416ee272aaf6380fa27c620a7200c601c61eae286ab4927b21f2cf4979289580d9252cd2527772cc11ce3f752efba4c05

    • SSDEEP

      98304:Ny8dhpdcOxS1zarMeCwmCeMQeRaCNEKpQ0wpa5SwTaPlaEfdahqN6lNwWug7wKe5:gfzarMeCwmCeMQeRaCNEKpQ0wpa5SwTq

    Score
    10/10
    bandookrattrojan

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks