Extracted

• • Target

    Cotizacion_29.exe

  • Size

    2.6MB

  • MD5

    6ed6bd88f78ff7ee8ba5980d85229150

  • SHA1

    5eb9c047f76287b651107d72955c5fdbd54990bb

  • SHA256

    f22dedec943211ec2760f723ceb6571c56b75fe90ec3e4aa93c7e16ca16cf471

  • SHA512

    daa4e1042ccbd62695c872f8b1fb9d283140218f9bc7fdbe80c58f9230645d65de8c9886f2dd3793823d0e61d7cbac4e9ab773b8c04586486d075fcee7b463e6

  • SSDEEP

    49152:gpKYWd4ZZqLqXSJBAynF+GmD2qAFInzfZ79t:gU

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2