General
- Target eig3qy4jc52xz5ws.exe
- Size 394KB
- Sample260628-vrprhsaw9m
- SHA256 cc24934d514b7c0f90347ef613f095566bdf2af33991ed1bfa9068f6bb5da100
Score
10/10
Malware Config
Targets
-
- Target eig3qy4jc52xz5ws.exe
- Size 394KB
- SHA256 cc24934d514b7c0f90347ef613f095566bdf2af33991ed1bfa9068f6bb5da100
Score10/10-
Detects Sheetrat Payload
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Family: Sheetrat, NonEuclid rat
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender TamperProtection settings
-
UAC bypass
-
Windows security modification
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2