General
- Target АКТУАЛЬНО.exe
- Size 1.8MB
- Sample260517-ls7jaaat7p
- SHA256 a23bd57e96714b1f6313a283c486c9f80e1ebf336aded9cec7dfda74dea928cb
- MD5 39e9e844d4a9d893ed384291fa28373f
- SHA1 a0b56f47640f743d8be60c2fac9f36019c7e71e0
- SHA512 8eed98b3df7a5819a6e00312c42cf76448a2b9e16db7d987868140984b8c312fca4f294cf65a64a1b60888a0b86fb3a786fa8dc73da2847e997047f5bf43f139
- SSDEEP 1536:EBk/DulzB62hQ2S267npbnrK5chFW/DylrLItTpKHFtWbR/sAhTu2HpxvVyn/IMB:EQCvO4CGrT/EcpCNfFFaTA
- TLSH T1C295A73CADC4623725BB96BAC9F519CBFD61754336525C1E50AB03864D13BABBEC200E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
АКТУАЛЬНО.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
77.91.65.56:5202
Targets
-
- Target АКТУАЛЬНО.exe
- Size 1.8MB
- SHA256 a23bd57e96714b1f6313a283c486c9f80e1ebf336aded9cec7dfda74dea928cb
- MD5 39e9e844d4a9d893ed384291fa28373f
- SHA1 a0b56f47640f743d8be60c2fac9f36019c7e71e0
- SHA512 8eed98b3df7a5819a6e00312c42cf76448a2b9e16db7d987868140984b8c312fca4f294cf65a64a1b60888a0b86fb3a786fa8dc73da2847e997047f5bf43f139
- SSDEEP 1536:EBk/DulzB62hQ2S267npbnrK5chFW/DylrLItTpKHFtWbR/sAhTu2HpxvVyn/IMB:EQCvO4CGrT/EcpCNfFFaTA
- TLSH T1C295A73CADC4623725BB96BAC9F519CBFD61754336525C1E50AB03864D13BABBEC200E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.