Overview

overview

10

Static

static

10

aaca1d0a68...cf.exe

windows7-x64

10

aaca1d0a68...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf.exe

  • Size

    768KB

  • Sample

    241213-ddzk5axrgn

  • MD5

    f9026db46d3aba99ae513ebad80bbb6c

  • SHA1

    fba300cffc1b94f5e95fde5b92b1616ff9e91808

  • SHA256

    aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf

  • SHA512

    b864349a78c59e9646f0431245be4f0070f6af84369788b551b2fbc20eee6bd8a4897df9190fc420b5bfe1d1407814b324245039443329e723b7172210c3f0a4

  • SSDEEP

    12288:uvsXZv8km0OHcbGbvzWHz0HnquwQU+S0ssFWylkkoAbtEhTwfNqbYS2VbICKMIUr:ZfPz0HbdS0ssFlSjtMR

Score
10/10
sectopratdiscoveryratspywarestealertrojan

Malware Config

Targets

    • Target

      aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf.exe

    • Size

      768KB

    • MD5

      f9026db46d3aba99ae513ebad80bbb6c

    • SHA1

      fba300cffc1b94f5e95fde5b92b1616ff9e91808

    • SHA256

      aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf

    • SHA512

      b864349a78c59e9646f0431245be4f0070f6af84369788b551b2fbc20eee6bd8a4897df9190fc420b5bfe1d1407814b324245039443329e723b7172210c3f0a4

    • SSDEEP

      12288:uvsXZv8km0OHcbGbvzWHz0HnquwQU+S0ssFWylkkoAbtEhTwfNqbYS2VbICKMIUr:ZfPz0HbdS0ssFlSjtMR

    Score
    10/10
    sectopratdiscoveryratspywarestealertrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks