Resubmissions

13-01-2025 10:44

250113-ms248s1qdj 7

13-01-2025 10:31

250113-mkl32s1mhq 10

General

  • Target

    https://www.mediafire.com/file/8luh427dyvker95/HVNC_Beta1.rar/file

  • Sample

    250113-mkl32s1mhq

Malware Config

Targets

    • Target

      https://www.mediafire.com/file/8luh427dyvker95/HVNC_Beta1.rar/file

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks