sectoprat

General

Target

a15e9db04994b573a9d20f057b3e673f5a260c1f33380ccc40c4c8a0a75453de
Size

407KB
Sample

240424-spp86acc6x
MD5

150a8dda54467dccca91480c9b5fdf94
SHA1

1acf401abee8209ee8bd993589703a3871a3687a
SHA256

a15e9db04994b573a9d20f057b3e673f5a260c1f33380ccc40c4c8a0a75453de
SHA512

142ad096bf6e6a8a682f7f7facab78da88f86b0e7b7787d6bfcd5a2813b0b084ba130b3a9e1f9f59c2e9587a32a50872054256b180663affd1e8bbd906a68ae7
SSDEEP

12288:hKPo3tbRSxp3IxzHxQ3OwdO8kCHm/jqe8BaP:hbRSxGxsJO8kCGrVUaP

Score

10^/10

Malware Config

Targets

- Target
  
  a15e9db04994b573a9d20f057b3e673f5a260c1f33380ccc40c4c8a0a75453de
- Size
  
  407KB
- MD5
  
  150a8dda54467dccca91480c9b5fdf94
- SHA1
  
  1acf401abee8209ee8bd993589703a3871a3687a
- SHA256
  
  a15e9db04994b573a9d20f057b3e673f5a260c1f33380ccc40c4c8a0a75453de
- SHA512
  
  142ad096bf6e6a8a682f7f7facab78da88f86b0e7b7787d6bfcd5a2813b0b084ba130b3a9e1f9f59c2e9587a32a50872054256b180663affd1e8bbd906a68ae7
- SSDEEP
  
  12288:hKPo3tbRSxp3IxzHxQ3OwdO8kCHm/jqe8BaP:hbRSxGxsJO8kCGrVUaP
Score

10^/10

sectoprat stealc rat stealer trojan
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

SectopRAT payload

Stealc

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2