Overview

overview

10

Static

static

5

mscoree.dll

windows10-ltsc_2021-x64

1

mscoree.dll

windows11-21h2-x64

1

msvcp140.dll

windows10-ltsc_2021-x64

1

msvcp140.dll

windows11-21h2-x64

1

ucrtbase.dll

windows10-ltsc_2021-x64

1

ucrtbase.dll

windows11-21h2-x64

1

vb7to8.exe

windows10-ltsc_2021-x64

10

vb7to8.exe

windows11-21h2-x64

10

vcruntime140.dll

windows10-ltsc_2021-x64

1

vcruntime140.dll

windows11-21h2-x64

1

vcruntime140_1.dll

windows10-ltsc_2021-x64

1

vcruntime140_1.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    malware_samples.zip
  • Size 4.0MB
  • Sample260722-pgewnsef96
  • SHA256 8856770afcb4724e84a60aaaf15a0b1233f33c5752d0ea16ae41b91c2902b2f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sectopratpersistencerattrojan

Malware Config

Targets

    • Target
      mscoree.dll
    • Size 2.6MB
    • SHA256 99279a25c028fc85747e68521fc5dee135bcfa01602fd3109cba81959db476d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      msvcp140.dll
    • Size 540KB
    • SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      ucrtbase.dll
    • Size 1.3MB
    • SHA256 c2ed69b4a1bb9432c75134e813c70539e27c8c1fe96a784d9be78c874e93d9d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      vb7to8.exe
    • Size 3.1MB
    • SHA256 17d4935ddc1f05cc18861b8270d935d52fa77bda00ca3e694cdedd807a8e0d78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sectopratpersistencerattrojan

    • Family: SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral7behavioral8
    • Target
      vcruntime140.dll
    • Size 120KB
    • SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      vcruntime140_1.dll
    • Size 46KB
    • SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks