Extracted

• • Target

    Confirmar Transferencia.exe

  • Size

    2.9MB

  • MD5

    d894efbc9e2d63b8ff959354e1307127

  • SHA1

    960b96e2e0f808d53ccc26f28fb0d66293ab7327

  • SHA256

    33ab6ca06026e2ac6592360374d20a319bcadd9e4e21a1644dae8ee6da952f49

  • SHA512

    51c5ff3e2674bc56b7098136770a72314c6acfddf6c0eaed06e3ea24480d8ae783aae2f01b4d4181ad6374381d596bb8febc98b73a1244e663f6f4251fc2f602

  • SSDEEP

    49152:eC3u7Xh4srWocjfd9vRUxD3dmgP8wfHKgF0QPStaEdE:eC+7x/rWor

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2