Behavioral task
behavioral1
Sample
2954a2cdf8601fd0d756fcd3309f611c5da075d4f0467e244bf31afa28ea96c5_03550000.bin_extracted_0x148f4.exe
Resource
win7-20221111-en
General
-
Target
2954a2cdf8601fd0d756fcd3309f611c5da075d4f0467e244bf31afa28ea96c5_03550000.bin_extracted_0x148f4.bin
-
Size
592KB
-
MD5
f68a8a259ffff1b6a81f42f69bdd55a4
-
SHA1
d4c86f289789ea3b146d4fcce721a1958d7b5bad
-
SHA256
e1e6a70cdb4e243eeca0f5f8954d275ab10b2b69c25e9e4bd2a98bc8b048ff29
-
SHA512
fa852ccb321ae2e50e55b780e48c77d9d0e945cc72fe3deda4402ce48499f3ca56953795c4c84a17a114a6117d97bd5aaa6a9881aab7d51d294091a576e0c944
-
SSDEEP
12288:JDG1WV0P9s/zp9WDQzdPe1QJmMLJYv5Wp5Hmr65KMB:JOWm2l9WDQzBe1cmoJYv5Wph0K
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
Files
-
2954a2cdf8601fd0d756fcd3309f611c5da075d4f0467e244bf31afa28ea96c5_03550000.bin_extracted_0x148f4.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ