sectoprat | 425dd633a5ed02e10cc255cb017632de[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

425dd633a5ed02e10cc255cb017632de.bin
Size

454KB
MD5

ac4068ddda4fb49ee172a1c8a70ed98a
SHA1

25a62f3c10f5f01b6aa712c507d174712462d6bc
SHA256

592ab6cbd1cbf6e6f89a8d554fab0aa3277fec41c125c28410d382a8bc135beb
SHA512

d2ebfc51c2a8ff3d0786d533ac6b99bfc36aa715cbf3fd6ee25dc523ac16f7b369ecb9d6f713111fb08dcdb1bb0a78d1aaf711e15c13663c45571621f6f18623
SSDEEP

12288:H4qdE9gEJzyZUjkx2vZgyCnkPAhPPx8jPLEu4yKI:HXt3ZUAx2KLkAxiPLD

Score

10^/10

sectoprat

Malware Config

Signatures

SectopRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/cb964ce3ee02dadefccd9b2392181ecef1bf4c2cae650c75caae0c7c133b5a03.exe	family_sectoprat

Sectoprat family
sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cb964ce3ee02dadefccd9b2392181ecef1bf4c2cae650c75caae0c7c133b5a03.exe

Files

425dd633a5ed02e10cc255cb017632de.bin
.zip

Password: infected
cb964ce3ee02dadefccd9b2392181ecef1bf4c2cae650c75caae0c7c133b5a03.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 817KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ