Extracted

• • Target

    Factura_Electronica #03354.exe

  • Size

    2.7MB

  • MD5

    afe7f749081e184fc5939f32d7a91f36

  • SHA1

    f78bfc01941110731eed31176de9b54449ba8419

  • SHA256

    62269eed586dfb6781c6de5dc053b39e99811cf8119fa45bf37f3036d6d611d2

  • SHA512

    5f1d60b50f09d12de77ea22759e9d563a4edb2c4202336b6811fc4bfc572fe5fc2cc2b34f4b977e3bf7f20f3d1325f22eae8ce9589a807344d11a67a6f61386a

  • SSDEEP

    24576:mMVzU2FmXkWgU38X0rfpG8hO7fzRVu5dHiKAMrqsW9Z1y2cwCm7YFoFYRMNNBG0u:hWwbQhOXU2Psh5KRcKU2PW7oPCcPTw

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2