Overview

overview

10

Static

static

1

4204b7ce4d...a7.exe

windows7-x64

10

4204b7ce4d...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4204b7ce4d84788188751160930920a7.exe

  • Size

    6.7MB

  • Sample

    240520-s4rersge9v

  • MD5

    4204b7ce4d84788188751160930920a7

  • SHA1

    cc2b9ff9fd510fda0c2820f76800648c5c87497d

  • SHA256

    1aedfdbaf7c4a2b95b19e5c48108c3da0c0f5c6269c782f10c4e36151042ec03

  • SHA512

    4a3ec8f0f805e87bd9b02ab49b59f08677fd45239bec939fc67cb09d677086092f738fd0b3720f00a5cce265f1db0b49343495afa8e6149783dc7a065e684f99

  • SSDEEP

    98304:ixvhXTq3zYs4PtSY9/QJKOK8Bf0t+JKnEK5b2VU7AqT3faUM2SFmu7H1ClGnWngf:0XW3+tWJVBf0ttnEK5YqT+kGWng1VVF

Score
10/10
sectopratratspywaretrojan

Malware Config

Targets

    • Target

      4204b7ce4d84788188751160930920a7.exe

    • Size

      6.7MB

    • MD5

      4204b7ce4d84788188751160930920a7

    • SHA1

      cc2b9ff9fd510fda0c2820f76800648c5c87497d

    • SHA256

      1aedfdbaf7c4a2b95b19e5c48108c3da0c0f5c6269c782f10c4e36151042ec03

    • SHA512

      4a3ec8f0f805e87bd9b02ab49b59f08677fd45239bec939fc67cb09d677086092f738fd0b3720f00a5cce265f1db0b49343495afa8e6149783dc7a065e684f99

    • SSDEEP

      98304:ixvhXTq3zYs4PtSY9/QJKOK8Bf0t+JKnEK5b2VU7AqT3faUM2SFmu7H1ClGnWngf:0XW3+tWJVBf0ttnEK5YqT+kGWng1VVF

    Score
    10/10
    sectopratratspywaretrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks