Extracted

• • Target

    Doc-16052023 print.exe

  • Size

    3.3MB

  • MD5

    91a19b4692196d3f7bc3230c25430247

  • SHA1

    4d69842ef8441edaafdcb5f3a6d30a0c4ad4a9eb

  • SHA256

    a4d54caced8ab8b2b4b9ef47760b8cc1fde0ac27ae57d5d48905a5ae8149162d

  • SHA512

    86ed8998da4523638e216d13bea5ad7a7987ddac2828a2ea607ad9806f5010d628a301960c3adc82433cd8de7732ffbf58e6e5fed6c6565f6ea6a69360f6e392

  • SSDEEP

    49152:YOQ69Yu/GoMbr9oDY5ueIhCP7f9eAVrtxTEa6wc5YTHUuynwDDQF9dNA:Y

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2