sectoprat | hxxp://145[.]63[.]138[.]138[:]9000/wbinjget?q=0657061138410BB56B610B391AB33111 | Triage™

Login
Reports

Overview

overview

Static

static

1

URLScan

urlscan

1

http://145.63.138.13...

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
http://145.63.138.138:9000/wbinjget?q=0657061138410BB56B610B391AB33111
Sample260915-rxhcvaycne

Score

10^/10

sectoprat discovery rat suricata trojan

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://145.63.138.138:9000/wbinjget?q=0657061138410BB56B610B391AB33111

Resource

win11ltsc2024-20260911-fr

windows11-ltsc_2024-x64

11 signatures

150 seconds

discovery sectoprat rat suricata trojan

Malware Config

Targets

- Target
  http://145.63.138.138:9000/wbinjget?q=0657061138410BB56B610B391AB33111
Score

10^/10

discovery sectoprat rat suricata trojan
- Family: SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- Suricata alert: SectopRAT Malware Outbound Web Inject Request
  Network activity triggered a Suricata alert
  suricata sectoprat
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

discoverysectopratratsuricatatrojan

© 2018-2026

Terms | Privacy