Behavioral task
behavioral1
Sample
7f386e57807f0c2d48b0b33f35e6baf50ba5ee8b000bbd7b4bdd454cedc9ae81.exe
Resource
win7-20240221-en
General
-
Target
17502930540.zip
-
Size
427KB
-
MD5
0770576a4cc71f46369f1c800d9e39f2
-
SHA1
d045a2b2733f930e91f30f94ed56f59086893dba
-
SHA256
549ff34af878b82f3b30e53410389420e0fedc14708d408f1ccb561b85660775
-
SHA512
bc843d433fe816a546d6aab08ca2bb41577f48278c2714f2d152ca7dddee6e428561d226a193cdaf04a89360808384a3582675b9c2cc83fe9e8f3c42e5ead76d
-
SSDEEP
6144:p+JXlRdQh8eevZTIJ65v27zqqEzdYsvPzd3Bg5vMMfVS2qrXgh1Ieg4Zk78d01wj:s1lBeexcKcsRvPzzgeQVCrYId4ZSi0Ti
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule static1/unpack001/7f386e57807f0c2d48b0b33f35e6baf50ba5ee8b000bbd7b4bdd454cedc9ae81 family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7f386e57807f0c2d48b0b33f35e6baf50ba5ee8b000bbd7b4bdd454cedc9ae81
Files
-
17502930540.zip.zip
Password: infected
-
7f386e57807f0c2d48b0b33f35e6baf50ba5ee8b000bbd7b4bdd454cedc9ae81.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ