General

  • Target

    611f479e0b4bf0f32cf1a5295341117b

  • Size

    8.1MB

  • MD5

    611f479e0b4bf0f32cf1a5295341117b

  • SHA1

    a9136e2fbe4f23ac0e3e232bac55a3aa2afd2f7d

  • SHA256

    0e3af16ff0398d0691732b542ba834f33600699bd61df7f300362ec0374c648d

  • SHA512

    fc612ece8a61c10dd6203a6a796a585a755170c30ddb60d1fdc25725ea83acea2d70f89fc67a0fc935bde44402203db6dd9be67ce96f6f1ea169a4ba99bc2c55

  • SSDEEP

    196608:++9MGrMaA1hWg6PQiHV5/SAGocGiiAh0B4:++SvaBTPQiHV56icB

Score
10/10

Malware Config

Signatures

  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 611f479e0b4bf0f32cf1a5295341117b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections