General
- Target xeyeten.exe
- Size 558KB
- Sample260807-t77ftssvhy
- SHA256 ecb9dc85e2b25ca70af85ea516e518de24f6e2db1815ca1d93b751e4c5e02e5a
- MD5 a99923eca9428cc40c4b445c4f755c97
- SHA1 37217537f5e475bca501a8afc0e4fdcc05120437
- SHA512 9d0d4a440c40ab333115dae44b668630bc7b5a11a653d386d3f2fdd441e069cba5eb15094d51b22bdfe54ab023dc17b0da839b63fbf2c39455f6fa80686f8b91
- SSDEEP 6144:ReFqvW67v75rHsFr2TMrppLS0FsEIPpxNqvJSrzDS3lMUbbuzUIO0zoNz5eY3V:Ru67vtsr2TM3GQ4DQvJSfeR+oiSzbl
- TLSH T17AC4910CFE81F814CD1A3DB7CFE911044B7165C2AE2196823169AFFD8B6637259E267C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
xeyeten.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
xeyeten.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
2.6
Campaign
-
Sheet_rhywkuvvkkclwdfw
C2
-
bore.pub:14340
Targets
-
- Target xeyeten.exe
- Size 558KB
- SHA256 ecb9dc85e2b25ca70af85ea516e518de24f6e2db1815ca1d93b751e4c5e02e5a
- MD5 a99923eca9428cc40c4b445c4f755c97
- SHA1 37217537f5e475bca501a8afc0e4fdcc05120437
- SHA512 9d0d4a440c40ab333115dae44b668630bc7b5a11a653d386d3f2fdd441e069cba5eb15094d51b22bdfe54ab023dc17b0da839b63fbf2c39455f6fa80686f8b91
- SSDEEP 6144:ReFqvW67v75rHsFr2TMrppLS0FsEIPpxNqvJSrzDS3lMUbbuzUIO0zoNz5eY3V:Ru67vtsr2TM3GQ4DQvJSfeR+oiSzbl
- TLSH T17AC4910CFE81F814CD1A3DB7CFE911044B7165C2AE2196823169AFFD8B6637259E267C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Detects Sheetrat obfuscated version