General
- Target pk1fmayn6nd93xgd.exe
- Size 312KB
- Sample260629-tsga4abs2m
- SHA256 7364317fd48494ec56a2abbc917eca4e3ac3fe751e0dec80f671be4dd3cb7e84
- MD5 5047abd083599e95a1023c8831433003
- SHA1 03032d4905bc667c8361348ca72eb4f369aed09e
- SHA512 1a5e8d1ee94e9a06806006b217dfbcb52ce671171fdc9eb114a21ccf1e0dd72a69782b2265edb66ccea3677d5ef62a998576e8e0f6c4149a3b2fc06736dfc76b
- SSDEEP 6144:k/Yu9pZBj/QwmxT/w32rDAwLXt6pQL7uSEdNd/xcjTxm7Hb37vO9tYSw:sxTZBTQRMuGQOS+O/L9+Sw
- TLSH T10264A3293F948E00D585247ECA7E3A08CB62E1F125026347374AFAA55D059DEEE2D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pk1fmayn6nd93xgd.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.0
C2
-
fin.xzbvc.xyz:20100
Targets
-
- Target pk1fmayn6nd93xgd.exe
- Size 312KB
- SHA256 7364317fd48494ec56a2abbc917eca4e3ac3fe751e0dec80f671be4dd3cb7e84
- MD5 5047abd083599e95a1023c8831433003
- SHA1 03032d4905bc667c8361348ca72eb4f369aed09e
- SHA512 1a5e8d1ee94e9a06806006b217dfbcb52ce671171fdc9eb114a21ccf1e0dd72a69782b2265edb66ccea3677d5ef62a998576e8e0f6c4149a3b2fc06736dfc76b
- SSDEEP 6144:k/Yu9pZBj/QwmxT/w32rDAwLXt6pQL7uSEdNd/xcjTxm7Hb37vO9tYSw:sxTZBTQRMuGQOS+O/L9+Sw
- TLSH T10264A3293F948E00D585247ECA7E3A08CB62E1F125026347374AFAA55D059DEEE2D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.