General

  • Target

    57829b16c22b378c7a5c2e928d9c7ebd44e71b1f8edd5bfd6d072334efa7e958.zip

  • Size

    155KB

  • Sample

    250326-cbg3mawscx

  • MD5

    9f15b1a6990b988188b1dbac989eebb1

  • SHA1

    7035fae8a115e7cbe0ae8f8c3d502a899fa1fe55

  • SHA256

    57829b16c22b378c7a5c2e928d9c7ebd44e71b1f8edd5bfd6d072334efa7e958

  • SHA512

    0119b46d01eac6c847036f78dae11d16603dc4ad03c9fba0fd87400d943c7df5e10a91e7dd826fb209b5e433efc4ae9568a31b522a7a522fa688de6a475c6e20

  • SSDEEP

    3072:1GTFyRvI98UbqMLwk8kCgSmJ0AV+d7bLeXMt+NmI9A7XskNmjU7y:Y5wv68UeMLwkJNSmJda7bygmmFXgjU7y

Malware Config

Targets

    • Target

      4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774.exe

    • Size

      192KB

    • MD5

      fb4635e8ad7716789e76d759373ab95a

    • SHA1

      1bcb1a08e19276a9e7d0f68e66d452c7f1611c91

    • SHA256

      4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774

    • SHA512

      ebaf3bf1dca50edf000465072b391aad66a1a9e4444b21f49f0a353c4e3e56d9488186e12650962592b3d5445cfda333ca14579704203c90cdf7842d9069b694

    • SSDEEP

      3072:S15ESi3/WQmI7Sl9HewGFLnYsJDTESP83x7ILY8Vn/bYvf+3gsed66:S6vWQmI7SOfF7rTjP83xi7/b1wBd6

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks