Overview

overview

10

Static

static

10

2025-12-11...at.exe

windows10-2004-x64

10

2025-12-11...at.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2025-12-11_2409edcaa412a6ae00a2fccb2d42dae6_amadey_elex_glassworm_luca-stealer_magniber_njrat
  • Size 15.5MB
  • Sample251211-2dfd9atrcj
  • SHA256 ce7928e5d1c3d3e308271c51ba1500eccbd88c38f0796c3f9f9a62f62a83a565
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bandookdiscoveryrattrojan

Malware Config

Targets

    • Target
      2025-12-11_2409edcaa412a6ae00a2fccb2d42dae6_amadey_elex_glassworm_luca-stealer_magniber_njrat
    • Size 15.5MB
    • SHA256 ce7928e5d1c3d3e308271c51ba1500eccbd88c38f0796c3f9f9a62f62a83a565
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverybandookrattrojan

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook family

      bandook

    • Bandook payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks