General
- Target Client.exe
- Size 564KB
- Sample260426-w16xtset7x
- SHA256 8d6ef2abc0645aa2cea78afdb225a4e5f4af6e9e02bd96ba3ef849c4f422ef26
- MD5 b0946e97cc6f4f9a4725e9c1a996b7ce
- SHA1 e67e7068f51b0d8fda43fd75fd061407b6273913
- SHA512 7efdd0eb46b2db7bc6749494d9512969306e53ec3230146780212b555bc44d4106fb7f3cf911790696a37b54c06cc3abe5ff894bd40e76a958032aebc7b2865c
- SSDEEP 6144:/rQvk6aVK3CURwx5mwm5VsjCGWLEG16qR4Zobr7qFEqbIdKdFk3F7i:/16N6Gbb16IiC3Ik3F7i
- TLSH T134C4A10CFE91F804DE1A3DB7CFE911104B7165C1AE119646210AAFFD8BA63B359E267C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Client.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
2.6
Campaign
-
Sheet_tcwjcmmwqyakvk
C2
-
klaw8puets.localto.net:3641
Targets
-
- Target Client.exe
- Size 564KB
- SHA256 8d6ef2abc0645aa2cea78afdb225a4e5f4af6e9e02bd96ba3ef849c4f422ef26
- MD5 b0946e97cc6f4f9a4725e9c1a996b7ce
- SHA1 e67e7068f51b0d8fda43fd75fd061407b6273913
- SHA512 7efdd0eb46b2db7bc6749494d9512969306e53ec3230146780212b555bc44d4106fb7f3cf911790696a37b54c06cc3abe5ff894bd40e76a958032aebc7b2865c
- SSDEEP 6144:/rQvk6aVK3CURwx5mwm5VsjCGWLEG16qR4Zobr7qFEqbIdKdFk3F7i:/16N6Gbb16IiC3Ik3F7i
- TLSH T134C4A10CFE91F804DE1A3DB7CFE911104B7165C1AE119646210AAFFD8BA63B359E267C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.