Resubmissions

28/04/2025, 18:05

250428-wn6fjavtfz 10

18/07/2023, 13:08

230718-qdayzsbc8w 10

General

  • Target

    stub_186.exe

  • Size

    3.7MB

  • Sample

    230718-qdayzsbc8w

  • MD5

    0f3a69075e511390b5fdb4687f47ea0b

  • SHA1

    53de378df43435b0260d053243b1f75f63a3df85

  • SHA256

    693cace37b4b6fed2ca67906c7a4b1c11273110561a207a222aa4e62fb4a184a

  • SHA512

    d2ab99d50e30d3c3edea49480ceae1f45516f673ec7cc67499ec155f488b31a9e071ebca8d75d73f57ce08d7370396c7d074b41b37e66c1591f8774cbace965f

  • SSDEEP

    49152:neGqC5kz7oT/A4/Zg55JUdaowPMpbRG8w0xn+pan3MLeMMMMMMEe0pTz:eGSQE48KIow+bRG8w0IckeMMMMMMEe09

Score
10/10

Malware Config

Targets

    • Target

      stub_186.exe

    • Size

      3.7MB

    • MD5

      0f3a69075e511390b5fdb4687f47ea0b

    • SHA1

      53de378df43435b0260d053243b1f75f63a3df85

    • SHA256

      693cace37b4b6fed2ca67906c7a4b1c11273110561a207a222aa4e62fb4a184a

    • SHA512

      d2ab99d50e30d3c3edea49480ceae1f45516f673ec7cc67499ec155f488b31a9e071ebca8d75d73f57ce08d7370396c7d074b41b37e66c1591f8774cbace965f

    • SSDEEP

      49152:neGqC5kz7oT/A4/Zg55JUdaowPMpbRG8w0xn+pan3MLeMMMMMMEe0pTz:eGSQE48KIow+bRG8w0IckeMMMMMMEe09

    Score
    10/10
    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks