Overview

overview

10

Static

static

10

eqq4r9xnybpta9vu.exe

windows10-2004-x64

10

eqq4r9xnybpta9vu.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    eqq4r9xnybpta9vu.exe
  • Size 189KB
  • Sample260703-xe5nbaa12m
  • SHA256 b14418f429b103be2483b8440f1a0716b736e52a89655e62e604289f65aa4646
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetrattrojan

Malware Config

Extracted

Family

  • sheetrat

Attributes
  • anti_virtual

    false

  • certificate

    mm6gk7cioabl4l5qz

  • exclusion_wd

    &idz^im9d!d+k0v$mdp

  • hidden_file

    b(pjr+p4m&%&*36gp)n_!#i3o)dn1tw

  • key

    57frmtcfqw6t1rp

  • path_client

    91z2kl(n@9kz364amrfgu)_&yt

  • path_watch_dog

    1q3%ps7(0ad@t7^&cv3%

  • pump

    uzdd#$th#)yqgq%1d

  • rootkit

    5Xpp-'W-5

  • task_client

    z344!cb)+b7@fj5v

  • task_watch_dog

    t14jbxy(q5kcl^cok03

  • use_install_admin

    iyhm6m2n1wksw4v0x

  • user_init

    rv#%5xb%_6t^3rwi)_c

Targets

    • Target
      eqq4r9xnybpta9vu.exe
    • Size 189KB
    • SHA256 b14418f429b103be2483b8440f1a0716b736e52a89655e62e604289f65aa4646
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sheetrattrojan

    • Detects Sheetrat Payload

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks