General
- Target xf656fa4556d98a03530b431c0e4bc9e3c5c3deb28715d6cae79c7717bf72e373.exe
- Size 374KB
- Sample260601-xej2lsdv3y
- SHA256 f656fa4556d98a03530b431c0e4bc9e3c5c3deb28715d6cae79c7717bf72e373
Score
10/10
Malware Config
Targets
-
- Target xf656fa4556d98a03530b431c0e4bc9e3c5c3deb28715d6cae79c7717bf72e373.exe
- Size 374KB
- SHA256 f656fa4556d98a03530b431c0e4bc9e3c5c3deb28715d6cae79c7717bf72e373
Score10/10Detects Sheetrat Payload
Sheetrat aka NonEuclid RAT is a trojan written in C#.
Family: Sheetrat, NonEuclid rat
Sheetrat aka NonEuclid RAT is a trojan written in C#.
Modifies Windows Defender DisableAntiSpyware settings
Modifies Windows Defender TamperProtection settings
UAC bypass
Windows security modification
Checks whether UAC is enabled
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2