General
- Target https://repo.thread-community.net/repository?material=file-1788362932392&ref=244b4da7
- Sample260905-ne79rsbl2w
Score
10/10
Malware Config
Targets
-
- Target https://repo.thread-community.net/repository?material=file-1788362932392&ref=244b4da7
Score10/10-
Detects Dracula aka Samurai Stealer payload
-
Detects Sheetrat Payload
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Family: Dracula, Samurai
Dracula aka Samurai is a stealer written in C#.
-
Family: Sheetrat, NonEuclid rat
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1