General

  • Target

    DoxToolsInstaller.exe

  • Size

    10.7MB

  • MD5

    3e84c0bafc09a4e6e6458175bc5f2790

  • SHA1

    6d5069002fd9901d189c3929fa23ee96a2400c20

  • SHA256

    bde2e6bf71fa69a8b08ba2de2cb2a9e260688c7a71e02a5da43627b3909dfbdf

  • SHA512

    953abca78abdc62c8c9ccfef4fcd3cfd999d6ea79f1cff17d30b02ffadc8e21ca0f7b9841883f9c05c5ce58eb6dbc760bdee73d72444fc553a7e312884245ecf

  • SSDEEP

    1536:FqsCXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2YtmulgS6p:DIgzWHY3+zi0ZbYe1g0ujyzd0

Score
10/10

Malware Config

Signatures

  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DoxToolsInstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections