Overview

overview

10

Static

static

10

Cl1ient.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Cl1ient.exe
  • Size 538KB
  • Sample260930-yahtesserf
  • SHA256 4449878fc8fbc45a1cc696aa041fc73d7006340cb6f8a85bb49144bff8c9dfa3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sheetratsheet_okdjwdikbfdjjdefense_evasiondiscoverytrojan

Malware Config

Extracted

Family

  • sheetrat

Version

  • 2.6

Campaign

  • Sheet_okdjwdikbfdjj

Targets

    • Target
      Cl1ient.exe
    • Size 538KB
    • SHA256 4449878fc8fbc45a1cc696aa041fc73d7006340cb6f8a85bb49144bff8c9dfa3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    sheet_okdjwdikbfdjjdefense_evasiondiscoverysheetrattrojan

    • Detects Sheetrat obfuscated V1.8 and higher

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

    • Detects Sheetrat obfuscated version

    • Family: Sheetrat, NonEuclid rat

      Sheetrat aka NonEuclid RAT is a trojan written in C#.

      trojansheetrat

    • Modifies security service

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks