Extracted

• • Target

    TICKET DE PAGO-1.exe

  • Size

    2.6MB

  • MD5

    335c5c103dba30cc712e2eb49a63f305

  • SHA1

    c545b05100d9ac72ced15aca782287b940336124

  • SHA256

    0ae0913e72bb3175e33c363a0f8ccf4da17fbaee3eaec5b36e6d37f560b5c70e

  • SHA512

    4d7fbeae8d7b8aaa3e434275a23aaf2d98069d29858dcdd446ede12c60f52d03416da15b8d442d99ccb6d0010a450a83335a194e74b191022336f978cf83a22e

  • SSDEEP

    49152:af1hRf+J2FGTTYt5eT/KE1259g0qDdTgC0D:a

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2