Analysis
-
max time kernel
71s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
26/03/2025, 02:07
General
-
Target
4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774.exe
-
Size
192KB
-
MD5
fb4635e8ad7716789e76d759373ab95a
-
SHA1
1bcb1a08e19276a9e7d0f68e66d452c7f1611c91
-
SHA256
4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774
-
SHA512
ebaf3bf1dca50edf000465072b391aad66a1a9e4444b21f49f0a353c4e3e56d9488186e12650962592b3d5445cfda333ca14579704203c90cdf7842d9069b694
-
SSDEEP
3072:S15ESi3/WQmI7Sl9HewGFLnYsJDTESP83x7ILY8Vn/bYvf+3gsed66:S6vWQmI7SOfF7rTjP83xi7/b1wBd6
Score
10/10
Malware Config
Signatures
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774.exe"C:\Users\Admin\AppData\Local\Temp\4409d2170aa9989c6a8dd32b617c51a7c3e328b3c86410813c016691b2bd7774.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
216KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
408KB
-
Filesize
7.7MB