sectoprat | setup[.]exe

General

Target
setup.exe
Size 768KB
Sample240608-3flvgsaa2v
SHA256 f702ce107528b41bd2d6f725779f898d63a2dd1139cd5ae6da85d2eb6b51ca8e
MD5 1e78e781179b203275f674f4015f1512
SHA1 3c6e2e00953cf99248967d70613e8e5ec9570723
SHA512 4a952563f506089d2fc5aa8b785956fab692604d02214ac8cb9457499c5e9795088f6f3d9ba18d2dcc5019d2e4e8c84285f6cef3ab5e1dd30de06d2f9e01ea75
SSDEEP 12288:tvsXZv8km0OHcbGbvzWHz0HnquwTy+g0ssFWylkkoAbtEjQwfNqbYS2VbICKMIUb:+fPz0HILg0ssFlSj4nm
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sectoprat

SectopRAT payload 1 IoCs

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f702ce107528b41bd2d6f725779f898d63a2dd1139cd5ae6da85d2eb6b51ca8e
MD5 1e78e781179b203275f674f4015f1512
SHA1 3c6e2e00953cf99248967d70613e8e5ec9570723
SHA512 4a952563f506089d2fc5aa8b785956fab692604d02214ac8cb9457499c5e9795088f6f3d9ba18d2dcc5019d2e4e8c84285f6cef3ab5e1dd30de06d2f9e01ea75
SSDEEP 12288:tvsXZv8km0OHcbGbvzWHz0HnquwTy+g0ssFWylkkoAbtEjQwfNqbYS2VbICKMIUb:+fPz0HILg0ssFlSj4nm
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

792494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths