sectoprat | 87f7e5081a34770f1277d101c4ae40126623195cbce621196bde10e46df704b1 | Triage

Submit
Reports

Overview

overview

Static

static

1

55.msi

windows10-2004-x64

Sharing

General

Target

55.qty
Size

5.0MB
Sample

250402-y2cfqasyax
MD5

e58d905d9e1529e987c9a82a74ce29c9
SHA1

b305eef82dc620e836ada7b56de9e98b077bf118
SHA256

87f7e5081a34770f1277d101c4ae40126623195cbce621196bde10e46df704b1
SHA512

ff0d482d98676b1ffdfdb82ce7ba1327bde0d92deee583335ea5d93e7e8aa81aeae9b59753646fc4d12ee553e7254f654caffaee28d3756030912c7ce729ccfb
SSDEEP

98304:3Yqd1A4isy2+mnoWNO6wM8UBc9XzAwC2PBpQrkLa8:pZi6+LWNHwZUBcZzvPBpek

Score

10^/10

sectoprat discovery persistence privilege_escalation rat trojan

Static task

static1

Behavioral task

behavioral1

Sample

55.msi

Resource

win10v2004-20250313-en

sectoprat discovery persistence privilege_escalation rat trojan

windows10-2004-x64

18 signatures

150 seconds

Malware Config

Targets

- Target
  
  55.qty
- Size
  
  5.0MB
- MD5
  
  e58d905d9e1529e987c9a82a74ce29c9
- SHA1
  
  b305eef82dc620e836ada7b56de9e98b077bf118
- SHA256
  
  87f7e5081a34770f1277d101c4ae40126623195cbce621196bde10e46df704b1
- SHA512
  
  ff0d482d98676b1ffdfdb82ce7ba1327bde0d92deee583335ea5d93e7e8aa81aeae9b59753646fc4d12ee553e7254f654caffaee28d3756030912c7ce729ccfb
- SSDEEP
  
  98304:3Yqd1A4isy2+mnoWNO6wM8UBc9XzAwC2PBpQrkLa8:pZi6+LWNHwZUBcZzvPBpek
Score

10^/10

sectoprat discovery persistence privilege_escalation rat trojan
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Sectoprat family
  sectoprat
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sectopratdiscoverypersistenceprivilege_escalationrattrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.