sectoprat | fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

7

2c4ae2bb84...dd.exe

windows7-x64

2c4ae2bb84...dd.exe

windows10-2004-x64

Sharing

General

Target

2c4ae2bb8418890dcb1418a8777ebddd.exe
Size

2.9MB
Sample

230805-ycc1ysfd81
MD5

2c4ae2bb8418890dcb1418a8777ebddd
SHA1

7553c755559dd811c4a4904203da991accf0d3d6
SHA256

fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553
SHA512

fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467
SSDEEP

49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ

Score

10^/10

sectoprat rat spyware stealer themida trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2c4ae2bb8418890dcb1418a8777ebddd.exe

Resource

win7-20230712-en

sectoprat rat spyware stealer themida trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2c4ae2bb8418890dcb1418a8777ebddd.exe

Resource

win10v2004-20230703-en

sectoprat rat spyware stealer themida trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2c4ae2bb8418890dcb1418a8777ebddd.exe
- Size
  
  2.9MB
- MD5
  
  2c4ae2bb8418890dcb1418a8777ebddd
- SHA1
  
  7553c755559dd811c4a4904203da991accf0d3d6
- SHA256
  
  fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553
- SHA512
  
  fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467
- SSDEEP
  
  49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ
Score

10^/10

sectoprat rat spyware stealer themida trojan
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sectopratratspywarestealerthemidatrojan

behavioral2

sectopratratspywarestealerthemidatrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.