General

  • Target
    lf1t99s3j54ra403.exe
  • Size 44KB
  • Sample260701-yhcmdadw9r
  • SHA256 82337d98b955fe231a4b0dd2b4ad36fb8835f6a8a1a40c40234ab696e40bb4fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • sheetrat

Version
  • 1.8

C2
  • CapYy-56522.portmap.host:56522

Mutex
Attributes
  • anti_virtual

    false

  • certificate

    tkhgf1gpwzgqkd5e0c2a2a

  • exclusion_wd

    false

  • hidden_file

    true

  • install

    true

  • install_watch_dog

    false

  • key

    j34reh1qns

  • path_watch_dog

    iz^02sm3mq3fyei50v%a9g$nq@k

  • pump

    false

  • rootkit

    false

  • task_watch_dog

    e5xio97)6cbi#i4f(*pf6d%mg!!

  • use_install_admin

    false

  • user_init

    false

Targets

    • Target
      lf1t99s3j54ra403.exe
    • Size 44KB
    • SHA256 82337d98b955fe231a4b0dd2b4ad36fb8835f6a8a1a40c40234ab696e40bb4fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detects Sheetrat Payload

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

MITRE ATT&CK Matrix

Tasks