sectoprat | ac5d46a0ed28d976e5ce100e4c74cc4c5d176d85d531752728b19adf16db97b8 | Triage

Sharing

General

Target

ac5d46a0ed28d976e5ce100e4c74cc4c5d176d85d531752728b19adf16db97b8.exe
Size

755KB
Sample

250218-jhwmxsznx3
MD5

801ed561da1b01366f4636e845b52194
SHA1

1c591158b3459f279516cf57f42c7875c3548fd9
SHA256

ac5d46a0ed28d976e5ce100e4c74cc4c5d176d85d531752728b19adf16db97b8
SHA512

792883919e71c8fc70225cc134f1a52c716de67988b55f57a973766f1e12f1146bfe24833f9db5eb36b312ac3989113d7a0232e145316d5937ba84e16cce205c
SSDEEP

12288:ElPcUdmdXsyWvjwEzwIhJ7mnBdZhXQX8OzepFPP:kry6cM+n/QsdP

Score

10^/10

sectoprat discovery rat spyware stealer trojan

Malware Config

Targets

- Target
  
  ac5d46a0ed28d976e5ce100e4c74cc4c5d176d85d531752728b19adf16db97b8.exe
- Size
  
  755KB
- MD5
  
  801ed561da1b01366f4636e845b52194
- SHA1
  
  1c591158b3459f279516cf57f42c7875c3548fd9
- SHA256
  
  ac5d46a0ed28d976e5ce100e4c74cc4c5d176d85d531752728b19adf16db97b8
- SHA512
  
  792883919e71c8fc70225cc134f1a52c716de67988b55f57a973766f1e12f1146bfe24833f9db5eb36b312ac3989113d7a0232e145316d5937ba84e16cce205c
- SSDEEP
  
  12288:ElPcUdmdXsyWvjwEzwIhJ7mnBdZhXQX8OzepFPP:kry6cM+n/QsdP
Score

10^/10

sectoprat discovery rat spyware stealer trojan
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Sectoprat family
  sectoprat
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sectopratdiscoveryratspywarestealertrojan

behavioral2

sectopratdiscoveryratspywarestealertrojan