Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://drive.google...

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://drive.google.com/file/d/1AhH_IFwrL1iUIvmxjPfR9v465CSX-v0I/view?usp=drive_web

  • Sample

    231214-w87jbshbf4

Score
10/10
bandookrattrojanupx

Malware Config

Targets

    • Target

      https://drive.google.com/file/d/1AhH_IFwrL1iUIvmxjPfR9v465CSX-v0I/view?usp=drive_web

    Score
    10/10
    bandookrattrojanupx

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks