sectoprat | download[.]bin[.]exe

General

Target
download.bin.exe
Size 768KB
Sample240805-zxp2pasbpg
SHA256 e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846
MD5 38b37cca4768526f4b6ce1438063e9a2
SHA1 2fe8949e285946a33db3d27e27024d531c13cd62
SHA512 2727d2cd00787f92cb764c95cd265f83eb09b959b051389c97cc281852a199377e0f7e1a1124229ee8859e5c7d180d666295cf145260083b9b35b8d6785124ca
SSDEEP 12288:mvsXZv8km0OHcbGbvzWHz0Hnquw9J+70ssFWylkkoAbtE57wfNqbYS2VbICKMIUX:BfPz0Hmo70ssFlSjFh8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sectoprat

SectopRAT payload 1 IoCs

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.bin.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846
MD5 38b37cca4768526f4b6ce1438063e9a2
SHA1 2fe8949e285946a33db3d27e27024d531c13cd62
SHA512 2727d2cd00787f92cb764c95cd265f83eb09b959b051389c97cc281852a199377e0f7e1a1124229ee8859e5c7d180d666295cf145260083b9b35b8d6785124ca
SSDEEP 12288:mvsXZv8km0OHcbGbvzWHz0Hnquw9J+70ssFWylkkoAbtE57wfNqbYS2VbICKMIUX:BfPz0Hmo70ssFlSjFh8
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

792494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths