sheetrat | 66b61e6c7b2248229e2a78bfa9e997af5480ec0cddb50967a0a51fcad3dc4a5c

Sharing

Copy URL Twitter E-mail

General

Target
Ultimate-RAT-Collection-SheetRat.zip
Size 28.8MB
Sample260805-zf45aadh83
SHA256 66b61e6c7b2248229e2a78bfa9e997af5480ec0cddb50967a0a51fcad3dc4a5c
MD5 b6361333fceee84b7cc42f207df0909a
SHA1 947659617054052cd34e5d21318bab28e59bfd08
SHA512 9729b3135cf74c237189d0ef2d41208b8bf8cda690147af304231bc7c512fa35fd84e2e9088cb7445d59e83ba0be25c1856dfcf934a40ff6f1e3aedaf9da7a93
SSDEEP 786432:/3J6Xbrih9tgUqtrtjB1KiqP90JqqlUYEg:/kHih/gUqtrJscZzv
TLSH
T1546733FD7D6EB6684F5C681BC752A7FF02798C5DB06900AF7B2A831D2C4B94C0762462
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  sheet rat v2.6/Confused/Server.exe
- Size 1.8MB
- SHA256 b497e24534343529d5393ebdbb2d9f7418ee984621a1ac17c61f6b69a19ea548
- MD5 2f4953747860b6b9f5e2d281ad7b33ed
- SHA1 b3c494f18efc33201bfeb70c46a20305e9e6a4c1
- SHA512 e64337f8cb3491b0962c9caa6a44fb6dbeb4d439b1ea9959475b85244537ada732a894199c77f56c92fa28f676ffac371c84769acdcac7400493f9042710c765
- SSDEEP 24576:IpU3em+XAPv+yqIflXp8QuPPWijaVjZ3XNS/c6vRpoEosA7iNP:HL+pynt5eFWVjZHN8Tis4iNP
- TLSH
  T1F295FCDD726072EFC857D462DEA82CA8FA5174BB831F4213902715EDAA4D897CF244F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral1
- Target
  sheet rat v2.6/GMap.NET.Core.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- TLSH
  T152D5234D77FC068BF5BFDBBD7870069A8331F106AA37E30E15A154A91D23B818851BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  sheet rat v2.6/GMap.NET.WindowsForms.dll
- Size 147KB
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- TLSH
  T1DCE3BF6173A58D2FD6BF4BBFA46240C1A371E603F602C38D6D8820ED2897F5587523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  sheet rat v2.6/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  sheet rat v2.6/Ionic.Zip.dll
- Size 451KB
- SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
- MD5 6ded8fcbf5f1d9e422b327ca51625e24
- SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
- SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
- SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
- TLSH
  T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  sheet rat v2.6/MetroFramework.Design.dll
- Size 16KB
- SHA256 0a4a96082e25767e4697033649b16c76a652e120757a2cecab8092ad0d716b65
- MD5 ab4c3529694fc8d2427434825f71b2b8
- SHA1 7be378e382e43eae84f1567b3570bca9a67e7697
- SHA512 02d7935f68c30457da79ad7b039b22caed11d8aedfec7c96619ac6da59ceb7c5e7a758dced64ec02d31c37a2befccdc8eb59be9e2dc849aa2bc22fabb5fa00a5
- SSDEEP 384:HYAB8KPALBamLG3gckiBTVU6sgFf5L7WTOYKpKG4rw:HyLBamS3gckiBTVkgiVXr
- TLSH
  T114723205B2FC423AE7EFC5336BA945503D74A90DA872CA1C1CE80AF959F67424AD1F53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  sheet rat v2.6/MetroFramework.Fonts.dll
- Size 656KB
- SHA256 c843869aaca5135c2d47296985f35c71ca8af4431288d04d481c4e46cc93ee26
- MD5 65ef4b23060128743cef937a43b82aa3
- SHA1 cc72536b84384ec8479b9734b947dce885ef5d31
- SHA512 d06690f9aac0c6500aed387f692b3305dfc0708b08fc2f27eaa44b108908ccd8267b07f8fb8608eef5c803039caeabf8f88a18b7e5b1d850f32bbb72bcd3b0b7
- SSDEEP 12288:O+/9JcJlYqCNktA+SXfGpq2fHowSqCNktA+SXfvJR9FrIJJaqCNktA+SXfUC:O+/3qlrCNoh+UqgIwhCNoh+JR9FrIJJw
- TLSH
  T1D2E429B5760139E6EF11C4B7C260FD80192BB863A77B402A68E3077A88575CDFE53E46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  sheet rat v2.6/MetroFramework.dll
- Size 345KB
- SHA256 c2c12d31b4844e29de31594fc9632a372a553631de0a0a04c8af91668e37cf49
- MD5 34ea7f7d66563f724318e322ff08f4db
- SHA1 d0aa8038a92eb43def2fffbbf4114b02636117c5
- SHA512 dceb1f9435b9479f6aea9b0644ba8c46338a7f458c313822a9d9b3266d79af395b9b2797ed3217c7048db8b22955ec6fe8b0b1778077fa1de587123ad9e6b148
- SSDEEP 6144:M4S7k5hdCpU4YqfkUGz6KpQQZQHDXjNCdOZgLdL5DXBK:M4S7k5hdCEQHP1Zgj
- TLSH
  T1C8745C111399452AE1FF423AB457084187F7AE12F6BEEBAD69CCE0EC5F937414A42363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  sheet rat v2.6/NAudio.dll
- Size 464KB
- SHA256 8e347abc9301d67dd7493a0fbbe5cc1f912900c204a84220cc8cdf0e0b8df0de
- MD5 2e68aeb46e26a29ffe74cf97b94cbaf0
- SHA1 9384fa2946f744be3b47e131df14cbc0632052d2
- SHA512 39e56b0dd316e9a927ffeff486969f2a472f9b262b6a131afa60c34baa01784cde9cc6944f1a46ee73f3cc7135cb0049cc5a4bdfa419fab37667829522f6e7c9
- SSDEEP 6144:igY2UEI+85kQDHzER++2a4cSuEsHTyRwl0AYTA7qkpRMUwbX/1rFXF:TY/HXQl40HHdS4qYWN1F
- TLSH
  T175A47D2233E4582BE4AF5776E8F40D2B47B2F5463976EBCF65446A6D1C837424E00BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  sheet rat v2.6/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  sheet rat v2.6/Plugins/AutoRun.dll
- Size 12KB
- SHA256 f8c4e2f96fe1030a276cd7fb6c5e5a0a675f953f2b33db08fdff3d472658d098
- MD5 2d1298818aa582a1f1dd51dedf879cbf
- SHA1 429d01cabab977bcade38754ed28d8793ce1592d
- SHA512 0f482a322df5ee24c99348ea084bb358e37c7a8137afa46132aa7c06f1119c12b5ac711344263eb9556ce179738bebe58af6fd72c57933d8ae2a7d60dfba71fd
- SSDEEP 192:MIoRKIwOQJOsOTtiavNAf9/HFd8BPCP2a2uPzNcg8wFlxUSod:aRKDOaOsOTtiaVk9/lYPCP2a2uxZISM
- TLSH
  T14942CA09EBE0466AD97D5E3A187243958332AE47B503DF9F0DC830DA6B263C58611FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  sheet rat v2.6/Plugins/AutoTask.dll
- Size 95KB
- SHA256 c6b04c5d6663a952b9a548936ec3c505905c82ed6479961a1753fb031a1656cd
- MD5 4cf1872f764b48691f7a1699c0de8448
- SHA1 1576883f83d5c2fc1f35b5387e077eb3de620bb7
- SHA512 429cf7c1078625481709485cbc4f7cd8119dd08091e6552c725f505cff0c3bc27997ad76191cb6fcb39b3f849c785719dd785c24bf3bc02d62f51aceee873bbf
- SSDEEP 1536:XpLLddrrRW8yyQQSScDB33ZZXXVK5vc7IrZdbWDNv6piPUiR+IpQpB+rmT71s/ws:XpLLddrrRW8yyQQSScDB33ZZXXVKpc7F
- TLSH
  T1C393595177B8C667D1AE92F1A1B647548B70C202B217F3DA5EF814FC2C637804AA26DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  sheet rat v2.6/Plugins/Chat.dll
- Size 14KB
- SHA256 68c12c72a722fbf333352aad3308d297642e81d3298a9db7a10fbaf9042aea52
- MD5 61f46a6a9dd8464648fc70402aad5fa7
- SHA1 6f527ab6fc489df4c3882ab32f9cbcf3abc2f17f
- SHA512 44263c4bad2d2c17a1e87d682dada5855c31c8018ea8f28aaec5746a87643c29aa1554bc8a8da774f2bd43dc9009f4e721191c9fbe3a12b60c85ce028e556256
- SSDEEP 192:fclXwW7eCEW0aGMuisfC5GsTT9gsn9Tu5IPa9iiAKxfjd:Ulg2eBH7isK5Gs+09Tu5IPpiA4fjd
- TLSH
  T10C622A2577B4867BCA7D2AF654E31384037657222403DFDB9DD520CEAF9ABC446107C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  sheet rat v2.6/Plugins/Clipboard.dll
- Size 9KB
- SHA256 343c783191ce6fa824d6b64cb870b1f7fd41fe4cbdf0e17600d3615c444faa41
- MD5 d923f938fa89c84fe23cc827e4d71724
- SHA1 9c9a4d7a8b15b2e4a192f6d961c1241cb4d5326e
- SHA512 bc6766b5ba446034933a7031435056bbc93ce3f1ec2bbc8a6a98e4b0fa7bc708732b6c7bb4abf3dc7aba277b6f76100540fdb9ba85d8672d0cc778a4c3efd9ec
- SSDEEP 96:YCM73NjKIwOQcOsOC2708r4l+RnMqPM2cwRM92tTHoMbqLO:1iJKIwOQcOsOz7Jrh1WAC4tTIMbqq
- TLSH
  T10C121A15A774C67BDDAA063214BB83C04770D356751BDF9F0C98A4932F163C50321BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  sheet rat v2.6/Plugins/DDos.dll
- Size 46KB
- SHA256 ab6e77623d85c5c79798966105d24abaedf264c7c27762ce8a59752192638a7a
- MD5 c7a7a344b4e23bb4265b73505f1ad73d
- SHA1 126a4789db270e808a0ba8f7ade9b4a2f25b2637
- SHA512 1152f0486f47a059fb9a2b904704d507a8b76270dae343b45900e50e636e340dd5e67914e57dd957493dcfdb18873398847f146556972ba8934c9186a167064c
- SSDEEP 768:VIgSs5YPhaEDOVrqEkhshVh5hnh3hJhvh4nBlTOrktdzdxGqObI9DjWROeZ7:VIu8JOgEkWj/RxfZwQOet
- TLSH
  T17D231F14B3F01311F1FA627DA8F62506E93E7606FD32CBCE15B6620A0D627858885F6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  sheet rat v2.6/Plugins/FileManager.dll
- Size 495KB
- SHA256 d77ec15d4e5b29333806cef28612a5116a7004957e7cddd13b82f3b9f6b46ec5
- MD5 55d4b8e492a76539047b0e4ee1bf1c17
- SHA1 71443b814c0df05bc7e039d9d2ee201936e91b90
- SHA512 4c20a537f314634b7928551794db4fc2eb9d76f3ab2efcfc104704a24d29973a8ba7df8c892befc7511f54758b41cfde39dac4eb10862377840c8b808eb4a6c0
- SSDEEP 6144:ZI10mIHHP5HyGtSV41QJDsTDDtUMle6ZjxLV/u9HnAdKXy:o0mEZpS4YsVUCe65fu9aKX
- TLSH
  T1F6B48D006BD4C65BF1BE27B5D0F292A1C770F462FA6EEB8F5D4424EE1C12344A9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  sheet rat v2.6/Plugins/FreendConnect.dll
- Size 23KB
- SHA256 6145a438cedb77a2af3ba3fa696d0efb39402836beec724f0684a58c5495cc38
- MD5 38bdea28a600b421a06047120ad4f07d
- SHA1 61cb0c5748f01c94d7c64de3a898fc9bb23513ae
- SHA512 7c994e2fa1d8d2ae4533316a7a6f11b471397b66fe2555d9123e5928ebc9a97ed9d3b471848ac14df18efa6670a65133555cb5fde886e1264d2b2c04e14b57ee
- SSDEEP 384:SggTys1UIC05qq/ZAajzQlf8Ge1t5qbvw8TA9h/yKqS5RZR5ExqYcC:SNTyi/x/zSqXUbvuLqAYcC
- TLSH
  T1DCB24A0473D8C22DD1EE87792CB2971446B2E68B5503EF9E5CCC64FA193B7D08A10BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  sheet rat v2.6/Plugins/Fun.dll
- Size 45KB
- SHA256 0fcb98533f6857132bd43168d31379475e4463c9069597bb553acdecd04482b2
- MD5 0e149283390d3272a652661627a0dddd
- SHA1 673b608a1485d5a2282e3862b617dc8992ff7954
- SHA512 6f9f6ac379394bd58ad9bc0cab77152c196dc4b11452b3ee1c960f14cee68d459fc2d9ad3706595b6964530e44138875cf5e36dd741d7c41a48ceb0485cb3e85
- SSDEEP 768:vhzTf/SqfaQdc6qBdwCFTyWp+UErybV1KfGGPzbGaUys/K8Fb6EN3tEmtJqu3XH7:lff8BdwCFTyWp+UErybV1KflPzC/K8FT
- TLSH
  T1A6234A1377E88518E2BD0BB594E3334A8231B6972416DB9F1DD920FE09B53D69710FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  sheet rat v2.6/Plugins/Images.dll
- Size 11KB
- SHA256 a30cfa05b00bae06866742efa770ce32976be5095a3fb0e59c03dfda2e904c96
- MD5 b1bb08e62ae9e0944ab651c7cb8a0e4b
- SHA1 0921349fe92200c5bf263f683b98d9828056d8a5
- SHA512 0f7b61c5918f87f4abfb002e4ad06fbddacfe4b6d3cc5f4065264ea265746f4dd91cb49d862a1e91da656e3c4629448a3b98e82729370376e64e766604c6bece
- SSDEEP 192:nuf7mwOQSOsOF2nDgwPFksdruIyDVZ8JM9yN0sLLySB4hMbbi:g7FOROsOF2nUKVdSx9yN0sL/IMPi
- TLSH
  T195323911676CC63BCDAE0A722AB393984631EA43B807CF5F4DD870959F1B3CA62217D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  sheet rat v2.6/Plugins/Keylogger.dll
- Size 13KB
- SHA256 c234be82ce510981279a3d1e7f19b121cf63d066463a9da53b96d3d20573c0bf
- MD5 eb59ed6b40756e38d4d8484309a2132f
- SHA1 371b54789f857460c51370c600b47db98eedd405
- SHA512 cfb84003c82208e18ccc0f15b5cc1f971a5849961b513f5442aef13783ccf7ac2bbd6b41d97e9cdbdf5c4187c1623cb55b7d58e6d0e712896068cf84213abb56
- SSDEEP 192:XRKKIwOQmOsOX7poh4L1ncwRO4MprN/vMP0sXuDaVnux7V:hKKDO1OsOVIaA40N/UPVuDax07V
- TLSH
  T1815217097BE5823EDABE463B567353804BB0D6026957CF9B4DE9205E0F2A7C203127E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  sheet rat v2.6/Plugins/Map.dll
- Size 10KB
- SHA256 a43c0dfa281a5011fc24bdcb377afcc6bfe6f0280a5452e993f8eccba695601d
- MD5 9a855fef0fcbf9e52fc947dd50cc8c76
- SHA1 dc2b23e32322d4353f7a674c147ea4f8afb76fed
- SHA512 33a5a4d664fcbd79663f3b83038e303efb763720821f0310cc25ec8a6b07b776f44c5367239ec59ef9ae5ae86b83a2f30e22879ac7ddd3dd2e5f7a3d5ae98842
- SSDEEP 192:GQDKIwOQ+OsOeuQzVw06ZTbXj6vMwoQyNZ73sj4b/b:DDKDOdOsOeupzjoMvf3sjc/b
- TLSH
  T19D222B1AAB74C67AE7BE4176586357440772D3836603DB9F8D98A0C61E0F3C90B25BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  sheet rat v2.6/Plugins/Message.dll
- Size 9KB
- SHA256 92e9ce567622ea1f71981e237dcfd2064b6d4d249e7d714e9bce946968538528
- MD5 da2c19714d375aa2e4a6068778de4475
- SHA1 57b9f2c656edf6c168eb1678905f99eddcb90d94
- SHA512 d58a780e1930549816bd5a1c755ba2d95f63c9a6098372dbee504392eaa3b7678e2a7c335a91adaca710b41c2e00701b0c848fea94e3e19413b4111024bc5ba7
- SSDEEP 192:dQBKIwOQb7OsO5omvu2eG9UU1j9d+sm5:+BKDOkOsO1u2l9Usjpm5
- TLSH
  T1AC12D901ABB0C27BF9BE0A36A5B397D44775E7425906DB6F485C70830E173C68225BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  sheet rat v2.6/Plugins/MicroPhone.dll
- Size 507KB
- SHA256 0698c50082fa98b86f863e18e67c93289015c125a53bb7e986cabedacd03c484
- MD5 edcf7722663d21e80ce75809966a532b
- SHA1 a28e21fe834baee5d08445fa2450b21accc8687a
- SHA512 6503b51212fc373bb61f695fd2b423a98bfd8d53e150fcac3165fb923714b70afae23ed05c3e955931c1708ba8356d442e2b97c3b99268604bad0bdf47e3c950
- SSDEEP 12288:v7aFnooD9e9FRj05u/WX9/vbdN5UwMeWmB8:Tu/D9qx05Gi/BN5XB8
- TLSH
  T1ADB45B117BE4DD2BC06F37B6F4E20E2747F4E58AB266EB8B55801BA52D83B455C007A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  sheet rat v2.6/Plugins/MinerEtc.dll
- Size 14KB
- SHA256 5ad2970fc3b56fa9c9db1dd1d2a309398b216cce3dd750b6b562e13a7c198311
- MD5 9810d96bfd7236070008baf843c9e3f9
- SHA1 e2f306d064f82193b7fe1b2fe8f4c83b3a6db6e3
- SHA512 81f94596a9b3fac9945632ba04e08386c259aab7f60300a5352305d1808408bf6e21e8e087c963f39831be84e0d9600f6007f1704643c44b5b1e129f987cc9f4
- SSDEEP 384:+HgIeyB9nyO0NOTmFHHV8A/r8ZGcgM5rQtoCW:+HFB9MxT8rn
- TLSH
  T16762195277D48B3AEABD463B58B347584731F6876A13CB8F5CE820991B367CD1A10BD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  sheet rat v2.6/Plugins/MinerXmr.dll
- Size 20KB
- SHA256 5c1d6717a5adede293ca0cfbaeffc805add2eb1086d50c9b3465eea35391a395
- MD5 99fa25800b9fae285578f10f94028664
- SHA1 51e08fd7c41e857776efdb1562178bd7126f4b6b
- SHA512 e64eb8ed8183c0d78c25f7bb67b267792bf34cb8a7d72deac457cda8a69f16b737e8972f588ce58566c10fda6f57fa389c59ee5637f8e91ea7f51724dad9a3dc
- SSDEEP 384:LvgteruwfCeOZ2FcUbpg7gF1rTcUEj28A/fsoi1PD1OMI4C3CiC6CjCU4YztvXW:Lv1Cfr7gj0CMomC3CiC6CjC3YJ
- TLSH
  T14292F80577F48626F1FE8B7964B282184676BE83AD02CF4E4DF9604D0A75BC85A20FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  sheet rat v2.6/Plugins/Netstat.dll
- Size 12KB
- SHA256 c5fda1aa90d4bbc8762e488f8bfcf98d90993a4cccac1a866a9701a76cdb237f
- MD5 89a00c87c006c3a62058c0e748d2bd2e
- SHA1 902af277b4216bedac469ef06eabceaacbf6c1c1
- SHA512 d8d1fbb7bec76feaa48fd28f2c541c824d759a2fa3b9a244a17859452309eb901f73d864151a8808991eee7ebbd8542a8152a78409b44d398f032e5b2239e1b2
- SSDEEP 192:fCoKIwOQwOsOrgKpHIvlYKdeUXswRbXArvgwyz5lTTJd2oaRZx1C0FD:6oKDO7OsOPHq6KdeUXs2bX+ny9Jf2oab
- TLSH
  T155421A45AB60877ACB7D897210F343894778A7436A02DF9F09E850AD2E2F7CC0720BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  sheet rat v2.6/Plugins/Regedit.dll
- Size 266KB
- SHA256 63f64144f2802f2298d3956c25eda341d961b99eec9b27fe74b0256d89146feb
- MD5 6d576833fe0c563d123d1091d26d5405
- SHA1 1af67253ef16a4244fb29bb37945aea6e2636976
- SHA512 10bc068bb79548b2d965feb555d504b28db8edcbba5a56dd52b902375a08ddc8a1cceded9180367e393582a76b86ca00bd2a7e2cb152692affba35c071252ec3
- SSDEEP 3072:mHmRQfn0eqpQn7FDS+NkI0wgMz7loHShEbPIEm4Tp:mHmGMu7FG/KzgShU/m4T
- TLSH
  T1F3441824ABE8CA1BF1BF77F984B8062C4BF5F41AE65AE74A049410F90D1374469193BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  sheet rat v2.6/Plugins/RemoteCamera.dll
- Size 95KB
- SHA256 5e33ae7f7b3e5838550a37501683aad0b77383ec8f3b7ddbfd295514c8645a67
- MD5 0fea40d86be5f053179814b6d7b6d17f
- SHA1 3778ef8bc09b791d517fe90da64978e58480dda4
- SHA512 a8e2ca51b343532a0ff7585f1a25f9b4b17f5dd521385fd2294b7197f0394279665f513af712a263d8d877d62a79008c794b958b1f0a838644ce092203e9ac9a
- SSDEEP 1536:oTCCYYiikT7ddjj99nVquu00OOYmb7e9EAmkGXdiPUM8+IpQai+QWS9gM0OLlunx:oTCCYYiikT7ddjj99nVquu00OOYmbSyl
- TLSH
  T157934BA26BA9C56BD2AF27F5A4A34B048B70C2126117F3CB1EB414FC6C537814E617E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  sheet rat v2.6/Plugins/RemoteDesktop.dll
- Size 1.2MB
- SHA256 f7a83c1455e0e0b41dbe6e69daa346356fbfc076f3edb12b99b9d0f76ec4068e
- MD5 f8aef2a46829420080682c1233dd0e15
- SHA1 b75cde7ad84f187a2ceaac0f32749a34539c342e
- SHA512 36e21f7ab7fbab14e5e56eb45950d999448201cb245ebe0471cacd5883d41e344eb80cf7408aacd6a1560fd9629b63f8e380dff8f17258a2db96907898abd522
- SSDEEP 24576:h2vONVAx+95vf8ROmqdWEI8s3FFFFFFFFGTt+xt:hlNVAxU5vf8RnqdUFFFFFFFFy
- TLSH
  T1AB555B51FFE06EA6C08F36BEF4A159130AB0B0411276E78B4B46216D9FC73849D1ABD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  sheet rat v2.6/Plugins/ReverseProxy.dll
- Size 14KB
- SHA256 99997873b952b44998d9c28a25d26c97046c6152f517deb9c06f738733df7415
- MD5 da656fe7d882ae6f8c78101acf4e0a2a
- SHA1 99a183d8fcbab8b8e594627989b260ff1494558c
- SHA512 3b666d5c1e5a21facab580ad6837bab267c64c902f25af9fdf185e60e3c4d73a64681c987471803e3c48182e9b526cd35173ed3cb28d101e402638c7b9c344d4
- SSDEEP 192:OrkovhiP3SiKixEgeFdTzTbBSQEbho52J1XBCyCmmYLUnCP0w4:OrkovhhZikF9zBSQahogUyCmDYCP4
- TLSH
  T11262D6229FE88A7BE37C473454B253119332A84A3B83DB8F8D5834D76D2F7C192117A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  sheet rat v2.6/Plugins/Scheduler.dll
- Size 353KB
- SHA256 5f15a72a9f53fef2084ad853cdbfd867f4ac8f792fc649b8c3befa7c98a03d64
- MD5 a604f7d5acca504de9021798c3ac4bf7
- SHA1 8368cf3bd6035c9951eb83e4dbb95b237584c2a6
- SHA512 054b3e447d87c3433604bfa808fb7f0096fa0b05b74cd31a6faf9ed679f5e7a4694a25be78525bc7364b05060195e903e3154241171bf306d088c1c6a32b700e
- SSDEEP 3072:bkNXpEpNdgFR6+/7fbRwUqQK8vOQqny8EeWycJ5Dfwr9g0Sh5053gxeM72R6lCrk:IpEpDgP/7f1Jarv53by2nIDM65+lc
- TLSH
  T1E9744C10EFE8C22BE5BF17B6E4B302104BB5F586D566DB4F148864DC1C63349AE523AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  sheet rat v2.6/Plugins/SendFile.dll
- Size 19KB
- SHA256 d396f3c20883a3b71244c87c537595108010239e4e17e6c09bca83ea5a475677
- MD5 75ef0d23e82fe64a3ac7980a57149aa2
- SHA1 2e1505803f415c2f2c033a2b8996df0ed916f8a6
- SHA512 9b99b78cc3a94e68d72d2a5aadf07a12c6b18c0e076a25e17533323b7d8cfb86d05ce7e0b46aaf8821070bb369e277f28bc9d3c957904a6de66257e3502734e5
- SSDEEP 384:YJFOHOsOdVOB4jRKkACgdRngHPkHiMjWR+bSh0XSW9Ot575MZ919pCBmvec:Yi49g3FHiM1biF5wrMX
- TLSH
  T19F922B0DABE886A6D5EE4D762CB2861047B0FB175E03CB4F5CE990DD1E633C192507DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ConfuserEx .NET packer

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32