Extracted

• • Target

    https://drive.google.com/file/d/1YkYdlk-r3l9ewhvb2efqTt_qlS-AQcZC/view?usp=drive_web

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1