Overview
overview
10Static
static
10Sheet rat v2.6.7z
windows10-2004-x64
1Sheet rat v2.6.7z
windows11-ltsc_2024-x64
1sheet rat ...ll.dll
windows10-2004-x64
1sheet rat ...ll.dll
windows11-ltsc_2024-x64
1sheet rat ...ot.dll
windows10-2004-x64
1sheet rat ...ot.dll
windows11-ltsc_2024-x64
1sheet rat ...er.dll
windows10-2004-x64
1sheet rat ...er.dll
windows11-ltsc_2024-x64
1sheet rat ...em.dll
windows10-2004-x64
1sheet rat ...em.dll
windows11-ltsc_2024-x64
1sheet rat ...le.dll
windows10-2004-x64
1sheet rat ...le.dll
windows11-ltsc_2024-x64
1sheet rat ...gr.dll
windows10-2004-x64
1sheet rat ...gr.dll
windows11-ltsc_2024-x64
1sheet rat ...ac.dll
windows10-2004-x64
1sheet rat ...ac.dll
windows11-ltsc_2024-x64
1sheet rat ...er.dll
windows10-2004-x64
1sheet rat ...er.dll
windows11-ltsc_2024-x64
1sheet rat ...MB.dll
windows10-2004-x64
1sheet rat ...MB.dll
windows11-ltsc_2024-x64
1sheet rat ...er.exe
windows10-2004-x64
7sheet rat ...er.exe
windows11-ltsc_2024-x64
7sheet rat ...xe.xml
windows10-2004-x64
6sheet rat ...xe.xml
windows11-ltsc_2024-x64
1sheet rat ...nt.exe
windows10-2004-x64
10sheet rat ...nt.exe
windows11-ltsc_2024-x64
10sheet rat ...bf.dll
windows10-2004-x64
1sheet rat ...bf.dll
windows11-ltsc_2024-x64
1sheet rat ...64.sys
windows10-2004-x64
3sheet rat ...64.sys
windows11-ltsc_2024-x64
3sheet rat ...64.dll
windows10-2004-x64
1sheet rat ...64.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 07:50
Behavioral task
behavioral1
Sample
Sheet rat v2.6.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Sheet rat v2.6.7z
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
sheet rat v2.6/Plugins/Shell.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
sheet rat v2.6/Plugins/Shell.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
sheet rat v2.6/Plugins/SpeakBot.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
sheet rat v2.6/Plugins/SpeakBot.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
sheet rat v2.6/Plugins/Stealer.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
sheet rat v2.6/Plugins/Stealer.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
sheet rat v2.6/Plugins/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
sheet rat v2.6/Plugins/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
sheet rat v2.6/Plugins/SystemDisable.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
sheet rat v2.6/Plugins/SystemDisable.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
sheet rat v2.6/Plugins/TaskMgr.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
sheet rat v2.6/Plugins/TaskMgr.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
sheet rat v2.6/Plugins/Uac.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
sheet rat v2.6/Plugins/Uac.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
sheet rat v2.6/Plugins/WormJoiner.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
sheet rat v2.6/Plugins/WormJoiner.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
sheet rat v2.6/Plugins/WormSMB.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
sheet rat v2.6/Plugins/WormSMB.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
sheet rat v2.6/Server.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
sheet rat v2.6/Server.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
sheet rat v2.6/Server.exe.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
sheet rat v2.6/Server.exe.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
sheet rat v2.6/Stub/Client.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
sheet rat v2.6/Stub/Client.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
sheet rat v2.6/Stub/UserMode.obf.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
sheet rat v2.6/Stub/UserMode.obf.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
sheet rat v2.6/Stub/WinRing0x64.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
sheet rat v2.6/Stub/WinRing0x64.sys
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
sheet rat v2.6/Stub/ddb64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
sheet rat v2.6/Stub/ddb64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target Sheet rat v2.6.7z
- Size 28.8MB
- Sample260810-jprmjsyvbw
- SHA256 083b196995bbb69314e32168f13460d5d4eb8b9ad000fe3f61082fcefaf6a1cf
- MD5 f67d6014df95e47d28741634b913bbdb
- SHA1 804844031cf8672e77748c91cff7262df45c025a
- SHA512 31b4cfe198586b6ca1c746e7a67379b153bcf2dc38424b6ea9957fdb82cb326ff40d56436bb2fe0579e469c42dfc00ff27700b4c4037d9d3ff6b45e86fd039fd
- SSDEEP 786432:Kn0yV9SATGf0QY8Qua5MYkDMdb2eoae5dm/Kr4SV5NdTjo1:Kn0yXS9838Qua5uqneuKr4S9Q
- TLSH T1936733E025725572B9E0AB75453A1F8702BF8D973FB395B7D1393132827EA9370C1A22
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4892 7zFM.exe Token: 35 4892 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4892 7zFM.exe