General
- Target Client.exe
- Size 79KB
- Sample260825-aha7jsdm6x
- SHA256 42dd34fbd423cfc623f83baed42263837a99b91ae5f6c639d657a47ff42e03a1
- MD5 1357347328dad9a12856d65448575a50
- SHA1 49beb7dc107b2ee42bcb4b05b045285f689af72f
- SHA512 29c7178392b428f7f38d50c161993fc8cdc83e4b4e4461175b7319f0607ae90aeabe692909d97987962f2ad5df70d4ce04e429bedc085038f096a46f341d849d
- SSDEEP 1536:Dy/C+IRayn9s6RdhZrQDqPCsbGKIM7FpSAYC:D9Pj9s6RdXumCsbG3M7FpfYC
- TLSH T1B583E64473E84E10E1FE5FBA987251055735F8136D22E30E2AE2909DAA317C48DA5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Client.exe
- Size 79KB
- SHA256 42dd34fbd423cfc623f83baed42263837a99b91ae5f6c639d657a47ff42e03a1
- MD5 1357347328dad9a12856d65448575a50
- SHA1 49beb7dc107b2ee42bcb4b05b045285f689af72f
- SHA512 29c7178392b428f7f38d50c161993fc8cdc83e4b4e4461175b7319f0607ae90aeabe692909d97987962f2ad5df70d4ce04e429bedc085038f096a46f341d849d
- SSDEEP 1536:Dy/C+IRayn9s6RdhZrQDqPCsbGKIM7FpSAYC:D9Pj9s6RdXumCsbG3M7FpfYC
- TLSH T1B583E64473E84E10E1FE5FBA987251055735F8136D22E30E2AE2909DAA317C48DA5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat Payload
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.