Overview

overview

10

Static

static

10

aefd510d_.exe

windows10-2004-x64

10

aefd510d_.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    aefd510d_.exe
  • Size 419KB
  • Sample260705-l8feqsft3m
  • SHA256 871932d648cac13509b3584cb7079bd030273d18cb9c22d52ec055ebdf38ebbf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetratcosturadefense_evasiondiscoveryexecutionpackerpersistencetrojan

Malware Config

Extracted

Family

  • sheetrat

Version

  • 1.8

C2

  • portbuddy.dev:43033

Targets

    • Target
      aefd510d_.exe
    • Size 419KB
    • SHA256 871932d648cac13509b3584cb7079bd030273d18cb9c22d52ec055ebdf38ebbf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sheetrattrojancosturadefense_evasiondiscoveryexecutionpackerpersistence

    • Detects Sheetrat obfuscated V1.8 and higher

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks