Overview

overview

10

Static

static

1

5cbe2ec3c5...c1.exe

windows7-x64

7

5cbe2ec3c5...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cbe2ec3c59b2cffd0ff87d7931f3f406985cbeb5648f9afcd36475552e96cc1.exe

  • Size

    23.8MB

  • Sample

    241129-dwkvpaxqdr

  • MD5

    ecc581297b2c637c187c5b8f2455d0a9

  • SHA1

    3f07a6c4f13e193631f21db3950aa9393a5824b1

  • SHA256

    5cbe2ec3c59b2cffd0ff87d7931f3f406985cbeb5648f9afcd36475552e96cc1

  • SHA512

    a2271103092085798d4cdc47aec4c6cf685cfd5a4c6ea5d6116c2053649dd4f6c3c9e2c555485c708a0a2aed78b610009e1a0aa0413d1d4b491bfb5abd21da68

  • SSDEEP

    393216:d8jU2t/X9E3JMUNccjPql0NbgVunl22V5v+6m8FavWoB+Ysjuvk:CjU2p9EZvNdjP6Kbaunldv+6mLZ+YAuc

Score
10/10
sectopratdiscoveryexecutionrattrojan

Malware Config

Targets

    • Target

      5cbe2ec3c59b2cffd0ff87d7931f3f406985cbeb5648f9afcd36475552e96cc1.exe

    • Size

      23.8MB

    • MD5

      ecc581297b2c637c187c5b8f2455d0a9

    • SHA1

      3f07a6c4f13e193631f21db3950aa9393a5824b1

    • SHA256

      5cbe2ec3c59b2cffd0ff87d7931f3f406985cbeb5648f9afcd36475552e96cc1

    • SHA512

      a2271103092085798d4cdc47aec4c6cf685cfd5a4c6ea5d6116c2053649dd4f6c3c9e2c555485c708a0a2aed78b610009e1a0aa0413d1d4b491bfb5abd21da68

    • SSDEEP

      393216:d8jU2t/X9E3JMUNccjPql0NbgVunl22V5v+6m8FavWoB+Ysjuvk:CjU2p9EZvNdjP6Kbaunldv+6mLZ+YAuc

    Score
    10/10
    discoveryexecutionsectopratrattrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks