General
- Target lkwn3ndoxpjjbryj.exe
- Size 468KB
- Sample260708-2ymztsbs5s
- SHA256 7ed34fd90a8742c49c2aa6a0c8d1c1792d5d5f2671522eca62ddc06b3ce467b6
- MD5 3586b170e957768a2838a8ce056232fe
- SHA1 c907c457b94a88bce06b1040a9dfa6389eee0687
- SHA512 84bfe7c7e22187c6944a4cbf93ac6cf843107d3e88d6e88f485ef16a020275f7576da064dc7f1e9ce77f465ab5d07f83f32864b0fd5cd88e52405ab5b873aa44
- SSDEEP 6144:3s8FsS/ZlCmUEU0GWZIVmNRoVqhN7iAjZzOxdfk8tUJH28T/vJUbCiAQrGgR:cAsS/TCHEFGMPoK/7HTxlHg
- TLSH T1BBA4F7253FA58E00D584143ECABE3A09CB56E0F225026347370AF7A15D459EEDE6D3EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
C1pher1337-39279.portmap.host:39279
Targets
-
- Target lkwn3ndoxpjjbryj.exe
- Size 468KB
- SHA256 7ed34fd90a8742c49c2aa6a0c8d1c1792d5d5f2671522eca62ddc06b3ce467b6
- MD5 3586b170e957768a2838a8ce056232fe
- SHA1 c907c457b94a88bce06b1040a9dfa6389eee0687
- SHA512 84bfe7c7e22187c6944a4cbf93ac6cf843107d3e88d6e88f485ef16a020275f7576da064dc7f1e9ce77f465ab5d07f83f32864b0fd5cd88e52405ab5b873aa44
- SSDEEP 6144:3s8FsS/ZlCmUEU0GWZIVmNRoVqhN7iAjZzOxdfk8tUJH28T/vJUbCiAQrGgR:cAsS/TCHEFGMPoK/7HTxlHg
- TLSH T1BBA4F7253FA58E00D584143ECABE3A09CB56E0F225026347370AF7A15D459EEDE6D3EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.