Overview

overview

10

Static

static

3

f96c6016e4...18.exe

windows7-x64

10

f96c6016e4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240419-d8ngcaff88

  • MD5

    f96c6016e4b5a7268755c91a6b11fc35

  • SHA1

    69c5707f6f260dbffd451a1eecd99f9150d93554

  • SHA256

    e6ce11917223f46147c644fb6f642b90d91fca0c623d5f1b3f6153f8c52d9537

  • SHA512

    6a055095e91ee2f0830086853607bcd506e268424225c2d0986a30b795bfb92751190906c7b4c40e05a019fffb9d58c9ff5b98b91d9015c0143acebfb672ee97

  • SSDEEP

    49152:YuUJHU37QPg1Iypdo3f03LrCdbc4ml+TM4Zphd0f0:YuUJHUmg1IGdo38rMBw+TMd0

Score
10/10
sectopratrattrojan

Malware Config

Targets

    • Target

      f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118

    • Size

      2.1MB

    • MD5

      f96c6016e4b5a7268755c91a6b11fc35

    • SHA1

      69c5707f6f260dbffd451a1eecd99f9150d93554

    • SHA256

      e6ce11917223f46147c644fb6f642b90d91fca0c623d5f1b3f6153f8c52d9537

    • SHA512

      6a055095e91ee2f0830086853607bcd506e268424225c2d0986a30b795bfb92751190906c7b4c40e05a019fffb9d58c9ff5b98b91d9015c0143acebfb672ee97

    • SSDEEP

      49152:YuUJHU37QPg1Iypdo3f03LrCdbc4ml+TM4Zphd0f0:YuUJHUmg1IGdo38rMBw+TMd0

    Score
    10/10
    sectopratrattrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks