General
- Target Client2.exe
- Size 531KB
- Sample260502-bdgdfaby3p
- SHA256 48a3b32a2b94b2634d5e65099d7b80762fc7c8777962d09ac6f903ea73ebc0e6
- MD5 e890b14c9d800d3781fdcc920014b36e
- SHA1 417aa576882a2bee9c26b74bbbf262597beb352a
- SHA512 2e1c15ad465a3e3092b7ad233d09c4f4f9cbe38066e82b9fda14c2114d87d9a49053d9de84515aea68ede8ed4a4022d4b27eb90e16a565844a7681597a2451b5
- SSDEEP 6144:ND1ESPPwj5xue8P49Aib+Mm8rn/OIhFmuv3YiDddf3KkpEEqpLwK6Y+kUZbLm1On:ND1rwjLXWO/n2yRlSU5
- TLSH T109C48F0DFE91F805DE1E3DB7CFEA11004B7164C1AE1292463119AFFE8B6537259A26BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Client2.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Client2.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
2.6
Campaign
-
Sheet_warqdzqzwa
C2
-
tcp://ksztp-188-120-102-141.run.pinggy-free.link:42145
Targets
-
- Target Client2.exe
- Size 531KB
- SHA256 48a3b32a2b94b2634d5e65099d7b80762fc7c8777962d09ac6f903ea73ebc0e6
- MD5 e890b14c9d800d3781fdcc920014b36e
- SHA1 417aa576882a2bee9c26b74bbbf262597beb352a
- SHA512 2e1c15ad465a3e3092b7ad233d09c4f4f9cbe38066e82b9fda14c2114d87d9a49053d9de84515aea68ede8ed4a4022d4b27eb90e16a565844a7681597a2451b5
- SSDEEP 6144:ND1ESPPwj5xue8P49Aib+Mm8rn/OIhFmuv3YiDddf3KkpEEqpLwK6Y+kUZbLm1On:ND1rwjLXWO/n2yRlSU5
- TLSH T109C48F0DFE91F805DE1E3DB7CFEA11004B7164C1AE1292463119AFFE8B6537259A26BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.