General

  • Target

    780000.MSBuild.exe

  • Size

    474KB

  • MD5

    ca051155a3c4ac432f36e280a84341c5

  • SHA1

    2b0111014bb470d5dd354c22ecb1b431d8eac46a

  • SHA256

    7a8eea2ba74023897570e89c6ccf82ddbe10d69cae767776d3381110c052c094

  • SHA512

    477709a750a62a5fda1020b5b9ba427d48f984c8cf7a6b7b3a38be669e72061c8b8bab19a24f0b28e3405a5eeea8e0ff9d8c4198099c8c7b51dc25d6e6bdc8d2

  • SSDEEP

    6144:ulBYO4yjEb17TcMz5/hQluj0oGWA9HowGD9kh0vIOnPPuXlz34YAeA6vtZTOaoWm:4aO4Xb1740ZDw+vIcHuXlzEEvtF

Score
10/10

Malware Config

Signatures

  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 780000.MSBuild.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections