General
- Target SetupSuite_2024.24230_win64.exe
- Size 18.4MB
- Sample240521-1j91dabd33
- SHA256 78eea64a981219170ff45c927d11747c4c4d0f2baf0ebccef02e4fa82ea15007
Score
10/10
Malware Config
Targets
-
- Target SetupSuite_2024.24230_win64.exe
- Size 18.4MB
- SHA256 78eea64a981219170ff45c927d11747c4c4d0f2baf0ebccef02e4fa82ea15007
Score10/10SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
SectopRAT payload
Blocklisted process makes network request
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Executes dropped EXE
Suspicious use of SetThreadContext