General
- Target d0ci3d4r6q9uwgp9.exe
- Size 491KB
- Sample260706-tpkt4shv9v
- SHA256 bfd7c947a9d810496131c2684e484c756709e9ae52d08ae51723568dded724b1
- MD5 ecf1a307a41fdcb46d945adf13c6abc9
- SHA1 51e6f25823cd874d740747384bd973c9e0813f27
- SHA512 7a1d617f7b0643901222ccbeb387281206002750aef08ff4b582a94ea41fbbf7b375f811e9eb23146a69eaa54c369a2f21a92869c273da9b93bfbdf47e891000
- SSDEEP 6144:q/agsSu/bsYRzeFO/c4r+4KCT9Dqbh5odNM60MChLhy5syU8/OOhunpl9wwt2CbH:U7sSW1tOEc4S4FC5oXtevtpWCV/K
- TLSH T113B42A257F948E00D580297EC6BE3609CB16E0F225026347374AF7A25D059EEEE6D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
portbuddy.dev:43270
Targets
-
- Target d0ci3d4r6q9uwgp9.exe
- Size 491KB
- SHA256 bfd7c947a9d810496131c2684e484c756709e9ae52d08ae51723568dded724b1
- MD5 ecf1a307a41fdcb46d945adf13c6abc9
- SHA1 51e6f25823cd874d740747384bd973c9e0813f27
- SHA512 7a1d617f7b0643901222ccbeb387281206002750aef08ff4b582a94ea41fbbf7b375f811e9eb23146a69eaa54c369a2f21a92869c273da9b93bfbdf47e891000
- SSDEEP 6144:q/agsSu/bsYRzeFO/c4r+4KCT9Dqbh5odNM60MChLhy5syU8/OOhunpl9wwt2CbH:U7sSW1tOEc4S4FC5oXtevtpWCV/K
- TLSH T113B42A257F948E00D580297EC6BE3609CB16E0F225026347374AF7A25D059EEEE6D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.