Overview

overview

10

Static

static

10

Radmin.exe

windows10-2004-x64

10

Radmin.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Radmin.exe
  • Size 249KB
  • Sample260620-wl5ffsgt3n
  • SHA256 d42456afa9d49487e984d2e4b20259b178806ebb1ae29d833f12470c26cf7a3c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetratinfectedtrojan

Malware Config

Extracted

Family

  • sheetrat

Version

  • 1.8

Campaign

  • infected

C2

  • skype6374737376249872364623847653267676767676767-57712.portmap.host:57712

Mutex

  • _mCOSwsM6l

Attributes
  • anti_virtual

    false

  • certificate

    Llf1fZp9sHddWmOyVqd1R4Fyve0

  • exclusion_wd

    Is@2_ix&($tWSLu7gzYCghcx((

  • hidden_file

    pdDjsqNJUf5mA(AhxO0IRB_q

  • install

    false

  • install_watch_dog

    SsucrGt&5

  • key

    XNyUp5gIOxOEDQZpUGgktSifhNh68rdJ

  • path_client

    f)wm#0aF

  • path_watch_dog

    M++IOg#

  • pump

    oEoK9v

  • rootkit

    b8]]K=!Kb

  • task_client

    s&HUCJPB#uU)4j8gv98Pe

  • task_watch_dog

    g9N@WYT(i#tNlJf*FbL

  • use_install_admin

    %)VCZ+I^iHoC)0

  • user_init

    t_n7sInYIu02EbSn0HpTN0

Targets

    • Target
      Radmin.exe
    • Size 249KB
    • SHA256 d42456afa9d49487e984d2e4b20259b178806ebb1ae29d833f12470c26cf7a3c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    infectedsheetrattrojan

    • Detects Sheetrat Payload

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks