Overview

overview

10

Static

static

10

JaffaCakes...36.exe

windows7-x64

10

JaffaCakes...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4e9096d4d73f99eb1f8fe8e272568436

  • Size

    1.1MB

  • Sample

    250107-fhhjhsvnaz

  • MD5

    4e9096d4d73f99eb1f8fe8e272568436

  • SHA1

    f0a052d82554db4947f4de412c1cc456e58e2efe

  • SHA256

    4d079586a51168aac708a9ab7d11a5a49dfe7a16d9ced852fbbc5884020c0c97

  • SHA512

    449f2d450019a144f65eb3df7094294b49e7bd5d6dd0ccb2777467fc8a2b4be0e195a68d4f78c063c15ad7dadfe10b39972f3dff45b76dc9ac5b7e59a8622660

  • SSDEEP

    24576:syr6c/BoA7d4qXu1QTZ865DchV1fL7FJ:FPpouIQTZdDchV1HFJ

Score
10/10
bandookdiscoveryrattrojan

Malware Config

Targets

    • Target

      JaffaCakes118_4e9096d4d73f99eb1f8fe8e272568436

    • Size

      1.1MB

    • MD5

      4e9096d4d73f99eb1f8fe8e272568436

    • SHA1

      f0a052d82554db4947f4de412c1cc456e58e2efe

    • SHA256

      4d079586a51168aac708a9ab7d11a5a49dfe7a16d9ced852fbbc5884020c0c97

    • SHA512

      449f2d450019a144f65eb3df7094294b49e7bd5d6dd0ccb2777467fc8a2b4be0e195a68d4f78c063c15ad7dadfe10b39972f3dff45b76dc9ac5b7e59a8622660

    • SSDEEP

      24576:syr6c/BoA7d4qXu1QTZ865DchV1fL7FJ:FPpouIQTZdDchV1HFJ

    Score
    10/10
    bandookdiscoveryrattrojan

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook family

      bandook

    • Bandook payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks