General

  • Target

    f702ce107528b41bd2d6f725779f898d63a2dd1139cd5.exe

  • Size

    768KB

  • Sample

    240616-kywhjaxejd

  • MD5

    1e78e781179b203275f674f4015f1512

  • SHA1

    3c6e2e00953cf99248967d70613e8e5ec9570723

  • SHA256

    f702ce107528b41bd2d6f725779f898d63a2dd1139cd5ae6da85d2eb6b51ca8e

  • SHA512

    4a952563f506089d2fc5aa8b785956fab692604d02214ac8cb9457499c5e9795088f6f3d9ba18d2dcc5019d2e4e8c84285f6cef3ab5e1dd30de06d2f9e01ea75

  • SSDEEP

    12288:tvsXZv8km0OHcbGbvzWHz0HnquwTy+g0ssFWylkkoAbtEjQwfNqbYS2VbICKMIUb:+fPz0HILg0ssFlSj4nm

Score
10/10

Malware Config

Targets

    • Target

      f702ce107528b41bd2d6f725779f898d63a2dd1139cd5.exe

    • Size

      768KB

    • MD5

      1e78e781179b203275f674f4015f1512

    • SHA1

      3c6e2e00953cf99248967d70613e8e5ec9570723

    • SHA256

      f702ce107528b41bd2d6f725779f898d63a2dd1139cd5ae6da85d2eb6b51ca8e

    • SHA512

      4a952563f506089d2fc5aa8b785956fab692604d02214ac8cb9457499c5e9795088f6f3d9ba18d2dcc5019d2e4e8c84285f6cef3ab5e1dd30de06d2f9e01ea75

    • SSDEEP

      12288:tvsXZv8km0OHcbGbvzWHz0HnquwTy+g0ssFWylkkoAbtEjQwfNqbYS2VbICKMIUb:+fPz0HILg0ssFlSj4nm

    Score
    10/10
    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Tasks