General

  • Target

    867b04e89ebb05a7d4ec32f91054f0fe_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241102-t8596azeqj

  • MD5

    867b04e89ebb05a7d4ec32f91054f0fe

  • SHA1

    27253928cbd763980145ff27634f239b8678d29b

  • SHA256

    def2e1ce3d21f7c881a8c0251781b8fc35d74fb50c125aebe563669c0fae10e2

  • SHA512

    17b0c616f69046f428a48621f3788e1e62c6d8d92f1e093cfafc701ddb27bc3dedbeb8f1c17627973f493a7c73e200ac252ec994ac1657d310587dbd73934c24

  • SSDEEP

    12288:if5R/B0TKHNvhpYMuV04blV04bsTHTqGu:o5X0ghpYMuV0alV0awzqGu

Malware Config

Targets

    • Target

      867b04e89ebb05a7d4ec32f91054f0fe_JaffaCakes118

    • Size

      1.2MB

    • MD5

      867b04e89ebb05a7d4ec32f91054f0fe

    • SHA1

      27253928cbd763980145ff27634f239b8678d29b

    • SHA256

      def2e1ce3d21f7c881a8c0251781b8fc35d74fb50c125aebe563669c0fae10e2

    • SHA512

      17b0c616f69046f428a48621f3788e1e62c6d8d92f1e093cfafc701ddb27bc3dedbeb8f1c17627973f493a7c73e200ac252ec994ac1657d310587dbd73934c24

    • SSDEEP

      12288:if5R/B0TKHNvhpYMuV04blV04bsTHTqGu:o5X0ghpYMuV0alV0awzqGu

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks