General
- Target sss.exe
- Size 563KB
- Sample260727-qy1edabc55
- SHA256 20f61e029feb92305cbc32369bfbc31a33db652248803b444a75d7adc9ab1066
- MD5 058efd7e8a9960bf9bab4ad16ae117e2
- SHA1 b96d3efc6fde388e7264def29e4cb8380b35a84e
- SHA512 b6c2942dc508947e4e1a5344c284bfb2c0dfb602492f849dc05e372a545cbd52b1a7c1bc614bb54cde2e05e76c80afcf968f1e6f18f22997b90ea364a1aefcac
- SSDEEP 6144:GeeDODTfLwNLGueVgxRk8HBDKPCb/po+mGjAib1aWbIFkM5Pt0WjWu1:GfSfcGO1HB+Eovib1WFkYVD
- TLSH T1F7C4921CFD91F809CE2A3E73CEE914049B7121C1AE2191463159AFFD8B663B358E667C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sss.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.1
C2
-
tcp.niceports.shop:23223
Targets
-
- Target sss.exe
- Size 563KB
- SHA256 20f61e029feb92305cbc32369bfbc31a33db652248803b444a75d7adc9ab1066
- MD5 058efd7e8a9960bf9bab4ad16ae117e2
- SHA1 b96d3efc6fde388e7264def29e4cb8380b35a84e
- SHA512 b6c2942dc508947e4e1a5344c284bfb2c0dfb602492f849dc05e372a545cbd52b1a7c1bc614bb54cde2e05e76c80afcf968f1e6f18f22997b90ea364a1aefcac
- SSDEEP 6144:GeeDODTfLwNLGueVgxRk8HBDKPCb/po+mGjAib1aWbIFkM5Pt0WjWu1:GfSfcGO1HB+Eovib1WFkYVD
- TLSH T1F7C4921CFD91F809CE2A3E73CEE914049B7121C1AE2191463159AFFD8B663B358E667C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Detects Sheetrat obfuscated version