Threat Database Trojans Trojan.Bodegun.RD

Trojan.Bodegun.RD

By CagedTech in Trojans

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 2
First Seen: October 9, 2025
Last Seen: April 19, 2026
OS(es) Affected: Windows

The detection of Trojan.Bodegun.RD on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to compromise the integrity of your computer, steal sensitive information, and potentially cause harm to your digital assets. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.

What Is Trojan.Bodegun.RD?

Trojan.Bodegun.RD is a type of Trojan horse malware that can infiltrate your system through various means, such as malicious downloads, infected software, or exploited vulnerabilities. Once inside, it can establish a backdoor connection to a remote server, allowing attackers to access your system, steal data, and install additional malware. The name "Trojan.Bodegun.RD" suggests that it is a Trojan-type threat, but its specific characteristics and behaviors may vary.

How Trojan.Bodegun.RD Operates

Trojan.Bodegun.RD operates by exploiting weaknesses in your system's security, often through social engineering tactics or vulnerabilities in software. It can disguise itself as a legitimate program or file, making it difficult to detect. Once installed, it can communicate with its command and control server, receiving instructions and transmitting stolen data. This malware can also install additional components, such as keyloggers, spyware, or ransomware, to further compromise your system.

Symptoms of Infection

Systems infected with Trojan.Bodegun.RD may exhibit various symptoms, including slow performance, unexpected crashes, and unusual network activity. You may also notice unfamiliar programs or icons on your desktop, or receive suspicious pop-ups and alerts. In some cases, the malware may attempt to disguise itself as a legitimate program, making it challenging to identify. If you suspect that your system is infected, it is crucial to take immediate action to prevent further damage.

How to Remove Trojan.Bodegun.RD

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for a more effective removal process.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious components.
  3. Uninstall any suspicious programs or applications that may be related to the infection.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your system and perform a follow-up scan to ensure that the malware has been completely removed.

Conclusion

Removing Trojan.Bodegun.RD from your system requires a thorough and multi-step approach. By following the steps outlined above, you can help ensure the complete removal of this malware and prevent future infections. It is essential to remain vigilant and take proactive measures to protect your system, including keeping your operating system and software up-to-date, using strong antivirus software, and being cautious when downloading files or clicking on links from unknown sources. Remember, a clean and secure system is the best defense against malware and other cyber threats.

Analysis Report

General information

Family Name: Trojan.Bodegun.RD
Signature status: No Signature

Known Samples

MD5: 92fb6beb38e2bf3d6e090f9c42ea516d
SHA1: 73336121963b931b8f359dd3bcb975ca7e4e4484
SHA256: A227EA7847D4C36838FEE532A9A08060E6E726F0A28CB1A9F9DDC392C5AE6C83
File Size: 972.29 KB, 972288 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • HighEntropy
  • No Version Info
  • WriteProcessMemory
  • x64

Block Information

Total Blocks: 59
Potentially Malicious Blocks: 3
Whitelisted Blocks: 56
Unknown Blocks: 0

Visual Map

0 0 0 0 0 x x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 0 2 0 0 0 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAddAtomEx
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtClose
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateIoCompletion
Show More
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenMutant
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWriteFile
  • UNKNOWN

Trending

Most Viewed

Loading...