Extracted

• • Target

    Orden de Compra.exe

  • Size

    3.1MB

  • MD5

    14590acf2f905137fed9a2c963193aa5

  • SHA1

    2babf37152863a1b882fa525d4c8a1510f47c052

  • SHA256

    72deb006068fe144f367a21e71a6afa3b02d4fc22f9fb4fec118df97a39dc73f

  • SHA512

    4f9aabc238d7c5fdcd5919507a9e28e9b25903a7af12d9fbb8f429600ca3f911a19ab9f0a6577732ba0d57acf6072d3c53285e4c01d7a9cd9f3d7ee15e02afac

  • SSDEEP

    49152:nZipCPI498xdzZBxDJYd2cElsX8Okqw2Rt1eRob1:nZw

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2