Overview

overview

10

Static

static

3

a0c867e776...84.exe

windows7-x64

10

a0c867e776...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0c867e776121ce5889f99fcd5dd3006c1c86a343a58256a9a536d116615e284.exe

  • Size

    4.0MB

  • Sample

    250120-e7ryta1pbt

  • MD5

    edba5529bd552054f5409496f1d1782d

  • SHA1

    c99315b1eae4e8b409d78022a583459540f3bf1a

  • SHA256

    a0c867e776121ce5889f99fcd5dd3006c1c86a343a58256a9a536d116615e284

  • SHA512

    df17280eeb911057377b809c4deaeced97fa1dd1165a80c3fadb83ece22905585c41b29acc9e90a3eccdcbd6e3fcfa0c30afd87a6cb3724f49290f6a52a12326

  • SSDEEP

    98304:cKaAh0104NS7FGwCh1CTLBMtMeUjafSUYGzRodJ8opxQ9S:vlaf4XCbCTLBgMeUTYROJ8An

Score
10/10
sectopratdiscoveryrattrojan

Malware Config

Targets

    • Target

      a0c867e776121ce5889f99fcd5dd3006c1c86a343a58256a9a536d116615e284.exe

    • Size

      4.0MB

    • MD5

      edba5529bd552054f5409496f1d1782d

    • SHA1

      c99315b1eae4e8b409d78022a583459540f3bf1a

    • SHA256

      a0c867e776121ce5889f99fcd5dd3006c1c86a343a58256a9a536d116615e284

    • SHA512

      df17280eeb911057377b809c4deaeced97fa1dd1165a80c3fadb83ece22905585c41b29acc9e90a3eccdcbd6e3fcfa0c30afd87a6cb3724f49290f6a52a12326

    • SSDEEP

      98304:cKaAh0104NS7FGwCh1CTLBMtMeUjafSUYGzRodJ8opxQ9S:vlaf4XCbCTLBgMeUTYROJ8An

    Score
    10/10
    sectopratdiscoveryrattrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks