General
- Target anubis.zip
- Size 360KB
- Sample260825-kee2fafr5t
- SHA256 665fe98ab43808b53a7c19e64a996886236da63dd4aff6c2b609fe95b00f180d
- MD5 ac6eb42d894053e0e726ec0f81841ca8
- SHA1 e91d372a64c33072588e07e5482ae1fe8aa1d91f
- SHA512 fd50f39ee700f9bf07510400fc0f316400756a6dc218f4f28d2017b4d518949511aed0cfc6fceaf147094411bcd5477995a7485b7f931c4b6f1be97b21e67fbd
- SSDEEP 6144:YDB4RZQOt3HYyTsBLZk85sAbCPtktdXR+spCZK7ASUjqurwMSYM90cujDe3xU+1o:CO7ZinjsNktdwsk+ukMSz9juHCxUm7K5
- TLSH T1EE74234B0FA4A35EB893B4348F310A6C4E44A247D272498D11ECF69C9FB771E542ACDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
tcp.cloudpub.ru:50698
Targets
-
- Target anubis.exe
- Size 632KB
- SHA256 cc99c530b95610895f58cdd1208fca8101cbc3eb4932d49ca80846af6130a85e
- MD5 b80a2d01b9676411a875a1d0ba56d497
- SHA1 dbf8deddac73493a8b84483cb5a22e2a8c89edbb
- SHA512 5c4fea3fcce87f8e51546ca8f8c9d0b1f27de1ed27b7af02b51ee219e33c9d12d4b551698ca4b4c3ff098d92eb0fda68707948d1d52a1e671e49658bc0ec5a51
- SSDEEP 12288:Rk6fuT9ZInjszkDdqm9cAH3cwvuLDAVBPxyVo:+9yUm9BADABeo
- TLSH T1ABD4B2256FF4AE00E589193E857A2618DB32E0E117037347374BB6B24D4A9DEDE2C3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.