Overview

overview

10

Static

static

10

test.exe

windows10-2004-x64

10

test.exe

windows11-ltsc_2024-x64

10

Resubmissions

05/09/2026, 08:13

260905-j4l1lshj7v10

05/09/2026, 08:02

260905-jxhdvacg2310

05/09/2026, 07:56

260905-jstajscf8310

04/09/2026, 14:35

260904-rx8j2ataqc10

04/09/2026, 14:22

260904-rpkg8sy1fv10

04/09/2026, 11:25

260904-nje4sahl2z10

04/09/2026, 09:29

260904-lgbmgaxapg10

04/09/2026, 08:39

260904-kkemvsswet10

04/09/2026, 08:24

260904-kayyrawbna10

04/09/2026, 07:38

260904-jgvn8sej9w10

Sharing

Copy URL Twitter E-mail

General

  • Target
    test.exe
  • Size 559KB
  • Sample260904-rpkg8sy1fv
  • SHA256 59083faee374f8c6e2358fdf3ad26fc5e8e9f927b333b7b16525a57ee62a2cec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetratsheet_kzmcescgwtjsuthvrdiscoverytrojan

Malware Config

Extracted

Family

  • sheetrat

Campaign

  • Sheet_kzmcescgwtjsuthvr

C2

  • 43.228.157.121:8848

Targets

    • Target
      test.exe
    • Size 559KB
    • SHA256 59083faee374f8c6e2358fdf3ad26fc5e8e9f927b333b7b16525a57ee62a2cec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sheet_kzmcescgwtjsuthvrdiscoverysheetrattrojan

    • Detects Sheetrat obfuscated V1.8 and higher

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Detects Sheetrat obfuscated version

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks