Overview

overview

10

Static

static

10

test.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    test.exe
  • Size 453KB
  • Sample260714-y31vpsc17m
  • SHA256 1e46773a701784386d344d69ad516e8d7675f6cd73129371fa43daf73a26f8f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetrattrojan

Malware Config

Extracted

Family

  • sheetrat

Attributes
  • anti_virtual

    false

  • certificate

    9ovdw4o73ra4zsp97fqmbdodb0ahzu

  • exclusion_wd

    9prbwlk

  • hidden_file

    @(#i0t(ka_rqb%a3%ztn4m@*z$!o

  • key

    gtz0ny7s4i

  • path_client

    sm#q2o1*

  • path_watch_dog

    4i+eul@

  • pump

    bfnhnv

  • rootkit

    ;hQQZ<_Z;

  • task_client

    muk021_

  • task_watch_dog

    fy3)p5z6^9e1*h)(ybj19*

  • use_install_admin

    m9)puc

  • user_init

    $pzpl$wyxunjnw%

Targets

    • Target
      test.exe
    • Size 453KB
    • SHA256 1e46773a701784386d344d69ad516e8d7675f6cd73129371fa43daf73a26f8f5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sheetrattrojan

    • Detects Sheetrat Payload

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks