sheetrat | 28c7270fd396bdb394328125b6e456cbf87888bec81ddebe4f8f8de35e48ff76

Sharing

Copy URL Twitter E-mail

General

Target
28c7270fd396bdb394328125b6e456cbf87888bec81ddebe4f8f8de35e48ff76.bin
Size 8.2MB
Sample260728-29gl7azzds
SHA256 28c7270fd396bdb394328125b6e456cbf87888bec81ddebe4f8f8de35e48ff76
MD5 4fe956cfcce3a65e7d841e3fe2898301
SHA1 cc4779022b66a993734c62d764a1e0c2bd1e66ab
SHA512 803d0ceb681748fbdafecbf9a82ec5bcf60daafe248b9c61150b060aacb0b7ff9d81d84d67322efb8f3b7dee9b0ecf42dc6017330d540b5b69f8826a180f0912
SSDEEP 196608:lDRAMoo20nxkUki2EljCXlDeWexkSIPiNVfhyS307xaXk/JvHJDi9:lDl20nxLL2EljiP0kSPDgSENyk/11a
TLSH
T1B686339E0F878CCAF03574E420B9D733AFA4E6949766E6CA664170D9347A5C488C2FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

xworm

Version

tcp.cloudpub.ru:24606

Mutex

RFi3owP2zzYAwLY0

Attributes

Install_directory
%AppData%
install_file
Server.exe
telegram
https://api.telegram.org/bot8616726090:AAHLzmwzFhYJjSLs-kDtJdIpHg2fhPxSS0E/sendMessage?chat_id=8696467856

aes.plain

Targets

- Target
  SheetRat-main/SheetRat V2.6/GMap.NET.Core.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- TLSH
  T152D5234D77FC068BF5BFDBBD7870069A8331F106AA37E30E15A154A91D23B818851BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SheetRat-main/SheetRat V2.6/GMap.NET.WindowsForms.dll
- Size 147KB
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- TLSH
  T1DCE3BF6173A58D2FD6BF4BBFA46240C1A371E603F602C38D6D8820ED2897F5587523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SheetRat-main/SheetRat V2.6/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SheetRat-main/SheetRat V2.6/Ionic.Zip.dll
- Size 451KB
- SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
- MD5 6ded8fcbf5f1d9e422b327ca51625e24
- SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
- SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
- SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
- TLSH
  T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SheetRat-main/SheetRat V2.6/MetroFramework.Design.dll
- Size 16KB
- SHA256 0a4a96082e25767e4697033649b16c76a652e120757a2cecab8092ad0d716b65
- MD5 ab4c3529694fc8d2427434825f71b2b8
- SHA1 7be378e382e43eae84f1567b3570bca9a67e7697
- SHA512 02d7935f68c30457da79ad7b039b22caed11d8aedfec7c96619ac6da59ceb7c5e7a758dced64ec02d31c37a2befccdc8eb59be9e2dc849aa2bc22fabb5fa00a5
- SSDEEP 384:HYAB8KPALBamLG3gckiBTVU6sgFf5L7WTOYKpKG4rw:HyLBamS3gckiBTVkgiVXr
- TLSH
  T114723205B2FC423AE7EFC5336BA945503D74A90DA872CA1C1CE80AF959F67424AD1F53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SheetRat-main/SheetRat V2.6/MetroFramework.Fonts.dll
- Size 656KB
- SHA256 c843869aaca5135c2d47296985f35c71ca8af4431288d04d481c4e46cc93ee26
- MD5 65ef4b23060128743cef937a43b82aa3
- SHA1 cc72536b84384ec8479b9734b947dce885ef5d31
- SHA512 d06690f9aac0c6500aed387f692b3305dfc0708b08fc2f27eaa44b108908ccd8267b07f8fb8608eef5c803039caeabf8f88a18b7e5b1d850f32bbb72bcd3b0b7
- SSDEEP 12288:O+/9JcJlYqCNktA+SXfGpq2fHowSqCNktA+SXfvJR9FrIJJaqCNktA+SXfUC:O+/3qlrCNoh+UqgIwhCNoh+JR9FrIJJw
- TLSH
  T1D2E429B5760139E6EF11C4B7C260FD80192BB863A77B402A68E3077A88575CDFE53E46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SheetRat-main/SheetRat V2.6/MetroFramework.dll
- Size 345KB
- SHA256 c2c12d31b4844e29de31594fc9632a372a553631de0a0a04c8af91668e37cf49
- MD5 34ea7f7d66563f724318e322ff08f4db
- SHA1 d0aa8038a92eb43def2fffbbf4114b02636117c5
- SHA512 dceb1f9435b9479f6aea9b0644ba8c46338a7f458c313822a9d9b3266d79af395b9b2797ed3217c7048db8b22955ec6fe8b0b1778077fa1de587123ad9e6b148
- SSDEEP 6144:M4S7k5hdCpU4YqfkUGz6KpQQZQHDXjNCdOZgLdL5DXBK:M4S7k5hdCEQHP1Zgj
- TLSH
  T1C8745C111399452AE1FF423AB457084187F7AE12F6BEEBAD69CCE0EC5F937414A42363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SheetRat-main/SheetRat V2.6/NAudio.dll
- Size 464KB
- SHA256 8e347abc9301d67dd7493a0fbbe5cc1f912900c204a84220cc8cdf0e0b8df0de
- MD5 2e68aeb46e26a29ffe74cf97b94cbaf0
- SHA1 9384fa2946f744be3b47e131df14cbc0632052d2
- SHA512 39e56b0dd316e9a927ffeff486969f2a472f9b262b6a131afa60c34baa01784cde9cc6944f1a46ee73f3cc7135cb0049cc5a4bdfa419fab37667829522f6e7c9
- SSDEEP 6144:igY2UEI+85kQDHzER++2a4cSuEsHTyRwl0AYTA7qkpRMUwbX/1rFXF:TY/HXQl40HHdS4qYWN1F
- TLSH
  T175A47D2233E4582BE4AF5776E8F40D2B47B2F5463976EBCF65446A6D1C837424E00BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  SheetRat-main/SheetRat V2.6/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SheetRat-main/SheetRat V2.6/Plugins/AutoRun.dll
- Size 12KB
- SHA256 f8c4e2f96fe1030a276cd7fb6c5e5a0a675f953f2b33db08fdff3d472658d098
- MD5 2d1298818aa582a1f1dd51dedf879cbf
- SHA1 429d01cabab977bcade38754ed28d8793ce1592d
- SHA512 0f482a322df5ee24c99348ea084bb358e37c7a8137afa46132aa7c06f1119c12b5ac711344263eb9556ce179738bebe58af6fd72c57933d8ae2a7d60dfba71fd
- SSDEEP 192:MIoRKIwOQJOsOTtiavNAf9/HFd8BPCP2a2uPzNcg8wFlxUSod:aRKDOaOsOTtiaVk9/lYPCP2a2uxZISM
- TLSH
  T14942CA09EBE0466AD97D5E3A187243958332AE47B503DF9F0DC830DA6B263C58611FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SheetRat-main/SheetRat V2.6/Plugins/AutoTask.dll
- Size 95KB
- SHA256 15af12989304a01758c21b2fa884d54c4fda89c57b4baea1ee155ec912d2a019
- MD5 9b1c988ccc0ccff1dbdbef692d68f98b
- SHA1 90a7898daba862987dc793855516c1e06504c2ce
- SHA512 143d3fa458910496ed5af32dc5ad56c7142292aca847b4a189ff650fa3623b93657274bd704b1d5ce246b6c58442b41baba8a9540bcdf635cd8a6bf7df763de9
- SSDEEP 1536:SpLLddrrRW8yyQQSScDB33ZZXXVK5vc7IrZdbWDNv6piPUiR+IpQpB+rmT715/wL:SpLLddrrRW8yyQQSScDB33ZZXXVKpc7r
- TLSH
  T11D935A5177B8C567D1AE92F1A1B647548B70C202B217F3DA5EF814FC2C637804AA27DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SheetRat-main/SheetRat V2.6/Plugins/Chat.dll
- Size 14KB
- SHA256 68c12c72a722fbf333352aad3308d297642e81d3298a9db7a10fbaf9042aea52
- MD5 61f46a6a9dd8464648fc70402aad5fa7
- SHA1 6f527ab6fc489df4c3882ab32f9cbcf3abc2f17f
- SHA512 44263c4bad2d2c17a1e87d682dada5855c31c8018ea8f28aaec5746a87643c29aa1554bc8a8da774f2bd43dc9009f4e721191c9fbe3a12b60c85ce028e556256
- SSDEEP 192:fclXwW7eCEW0aGMuisfC5GsTT9gsn9Tu5IPa9iiAKxfjd:Ulg2eBH7isK5Gs+09Tu5IPpiA4fjd
- TLSH
  T10C622A2577B4867BCA7D2AF654E31384037657222403DFDB9DD520CEAF9ABC446107C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SheetRat-main/SheetRat V2.6/Plugins/Clipboard.dll
- Size 9KB
- SHA256 343c783191ce6fa824d6b64cb870b1f7fd41fe4cbdf0e17600d3615c444faa41
- MD5 d923f938fa89c84fe23cc827e4d71724
- SHA1 9c9a4d7a8b15b2e4a192f6d961c1241cb4d5326e
- SHA512 bc6766b5ba446034933a7031435056bbc93ce3f1ec2bbc8a6a98e4b0fa7bc708732b6c7bb4abf3dc7aba277b6f76100540fdb9ba85d8672d0cc778a4c3efd9ec
- SSDEEP 96:YCM73NjKIwOQcOsOC2708r4l+RnMqPM2cwRM92tTHoMbqLO:1iJKIwOQcOsOz7Jrh1WAC4tTIMbqq
- TLSH
  T10C121A15A774C67BDDAA063214BB83C04770D356751BDF9F0C98A4932F163C50321BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SheetRat-main/SheetRat V2.6/Plugins/DDos.dll
- Size 46KB
- SHA256 2d2a9c2fb00dc750c42a4a95e3d3c0ae7e8cb88e6d552b4f6f4036574e44e6f7
- MD5 fbbc4990bd0e1ca66ac73c485031e248
- SHA1 0d60c79a871cb742d1cfecda82274e0ef672dad4
- SHA512 67374f52b35f897e90a5f6f064d2c3a5b3fa9d62ce42b258b1cbc13d3614ca5d1086a660a0362ce2824414247655a809f64842c795e8c39f545f6603917af31f
- SSDEEP 768:RIgSs5YPhaEDOVrqEkhshVh5hnh3hJhvh4nBlTOrktdzdxGqObI9DjWROrZk:RIu8JOgEkWj/RxfZwQOre
- TLSH
  T15B231F14B3F01311F1FB627DA8F62506A93E7606FD32CBCE15B6620A0D627858885F6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SheetRat-main/SheetRat V2.6/Plugins/FileManager.dll
- Size 495KB
- SHA256 d810c06b22ca39684f331324ef2fb0bba844b6226b5914eb2ad53d60400d9c34
- MD5 669839e8aa78dc5112750da95cf90ce2
- SHA1 e4d164308c6af1bca6115c64160e923e81546c6e
- SHA512 4139209c70c2505dda1d8a000013b882ddbbe414544e10035809b9de67629512b74bd5fbbc1481498833918ce9603dc03ebd59924cf162d2c5574227a7932afe
- SSDEEP 6144:TI10mIHHP5HyGtSV41QJDsTDDtUMle6ZjxLV/u9HnAdKgy:W0mEZpS4YsVUCe65fu9aKg
- TLSH
  T1C8B48D006BD4C65BF1BE27B5D0F292A1C771F462FA6EEB8F5D4024EE1C12344A9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SheetRat-main/SheetRat V2.6/Plugins/FreendConnect.dll
- Size 23KB
- SHA256 0e6791e5b6d85042ede3350ad7ca6ac0dd745c33ee3cc5c9524a772b0b5a84d7
- MD5 013f33041e38febf4a3775aa5db0fa53
- SHA1 b7adb51c9323e038f38e4dde23d0c78be8022d86
- SHA512 4c7307778662b437b6f6a642c4c218f46147bf981db7e1cb65241778cb09d509434afea56da6e29290566fbc5f9e9cf2393966522d3334a3f142fb049d99757e
- SSDEEP 384:4nIgTys1UIC05qWP6EhfoGe1t5qbvw8TA9h/yKqS5RZR5ExDYcm:ulTyi7CaeXUbvuLqpYcm
- TLSH
  T1A9B23A0473D4C22DD1EE87792CB2971546B2E68B9903EF5E5CCC64FA193B7D08A10BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32