Extracted

• • Target

    https://docs.google.com/uc?id=1hy9hwzXPMxdqPlogoBfgaZDrlnyP2IAR&export=download&authuser=0

  Score

  10^/10

  bandookrattrojanupx

  • Bandook RAT

    Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

    rattrojanbandook

  • Bandook payload

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1