Overview

overview

10

Static

static

1

Visualizar...23.exe

windows7-x64

10

Visualizar...23.exe

windows10-2004-x64

10

Resubmissions

31-05-2023 19:10

230531-xvh49aaf5v 10

31-05-2023 19:03

230531-xqvmgsad2z 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Visualizarpdf-print-31052023.exe

  • Size

    4.4MB

  • Sample

    230531-xvh49aaf5v

  • MD5

    a12d326845a96a03867b2b70ca8f12ee

  • SHA1

    3b1264d2e156a09142847b6a18f70a3267c406e2

  • SHA256

    21ff46a6fc9173fcc147d7a5c603032c662c6c1f1b05c1bb1e30e20e168bb056

  • SHA512

    9fef1a558a6f0ea732f6a0078d2aaf5ca01d347f1a901328d78f420de249eae054074918d792d4a7b08bf92010f9a6797bc5635c649a94f67cea6fc7b175a7b6

  • SSDEEP

    49152:cbVY1yAdICj03tywdG0UhW45SG/kTQGKZE+59eJQIT2TKyP:co

Score
10/10
bandookrattrojanupx

Malware Config

Targets

    • Target

      Visualizarpdf-print-31052023.exe

    • Size

      4.4MB

    • MD5

      a12d326845a96a03867b2b70ca8f12ee

    • SHA1

      3b1264d2e156a09142847b6a18f70a3267c406e2

    • SHA256

      21ff46a6fc9173fcc147d7a5c603032c662c6c1f1b05c1bb1e30e20e168bb056

    • SHA512

      9fef1a558a6f0ea732f6a0078d2aaf5ca01d347f1a901328d78f420de249eae054074918d792d4a7b08bf92010f9a6797bc5635c649a94f67cea6fc7b175a7b6

    • SSDEEP

      49152:cbVY1yAdICj03tywdG0UhW45SG/kTQGKZE+59eJQIT2TKyP:co

    Score
    10/10
    bandookrattrojanupx

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks