General
- Target xesis.exe
- Size 48KB
- Sample260729-mk6sfsfg34
- SHA256 f83eaaa6484f776a75642b19f80e7327ba2279ab850331fb0721d228782af99d
- MD5 9717f766cbc0cf07a34f2cdb642e11ce
- SHA1 d348d7302b304379550d6a4f84fb0f5b915f6236
- SHA512 a1cf7289f08e2ad06d59cd954933c3b1cbb1dd823a48b2288e8d0e398f0470351728ddf3eecfd6287c896f3c6fad810dceb1bc3009650e5ff44f0ee4d091b765
- SSDEEP 768:XbvQbdBG19foZ7rHIHuO27Z8anj0Obd6FwUKfUoW:XbyE19snHIu7i4wObomPf0
- TLSH T18523E70C7B894AB5EF6F42BA9563621C8730C3635212D24A6CCB45E5231E7D8DE07DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
xesis.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
Campaign
-
sex
C2
-
tcp.niceports.shop:23223
Mutex
Attributes
-
anti_virtual
false
-
certificate
ez9wm4o0gqigdfnp
-
install
false
-
key
x0otn4xn0p5pu1ej6j
-
path_watch_dog
j1@pw3u3f3rc(k0f3pw10%
-
pump
5)ew)fyp9
-
rootkit
p:..N\dNp
Targets
-
- Target xesis.exe
- Size 48KB
- SHA256 f83eaaa6484f776a75642b19f80e7327ba2279ab850331fb0721d228782af99d
- MD5 9717f766cbc0cf07a34f2cdb642e11ce
- SHA1 d348d7302b304379550d6a4f84fb0f5b915f6236
- SHA512 a1cf7289f08e2ad06d59cd954933c3b1cbb1dd823a48b2288e8d0e398f0470351728ddf3eecfd6287c896f3c6fad810dceb1bc3009650e5ff44f0ee4d091b765
- SSDEEP 768:XbvQbdBG19foZ7rHIHuO27Z8anj0Obd6FwUKfUoW:XbyE19snHIu7i4wObomPf0
- TLSH T18523E70C7B894AB5EF6F42BA9563621C8730C3635212D24A6CCB45E5231E7D8DE07DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat Payload
Sheetrat aka NonEuclid RAT is a trojan written in C#.