Dark Caracal GoCaracal/Bandook/Delphi Loader Payloads (Aug 2026 LATAM)

Emiliano Mema@Nosalva

•updated Aug 31, 2026•0•0•1

Detects the presence of known malicious files associated with the Dark Caracal LATAM campaign, including GoCaracal, Bandook RAT, and Delphi-loader payloads, based on specific SHA-256 file hashes.