General

  • Target
    xamster.exe
  • Size 411KB
  • Sample261101-pj4b2scc32
  • SHA256 17a2bbad4f7725b0b39f1063c0df3cce567b56bbcd3702182968a24743a0c616
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      xamster.exe
    • Size 411KB
    • SHA256 17a2bbad4f7725b0b39f1063c0df3cce567b56bbcd3702182968a24743a0c616
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects SectopRAT aka Arechclient2

    • Family: SectopRAT

      SectopRAT also known as Arechclient2 is a remote access trojan first seen in November 2019.

MITRE ATT&CK Enterprise v16

Tasks