General
- Target hrev9fubhtuxdxrt.exe
- Size 364KB
- Sample261027-sa296sdg92
- SHA256 17044319e1d0ba4d265953463c70a695f5842f75e4b3531b2cec2097a61e40c6
- MD5 02fc551819928e7f57d30cc7c19b1972
- SHA1 e7e060fff8a96e35f6233a745ef153292866fceb
- SHA512 36effd40f1555dc130cade9016e914c4e3bdf20b601bf98f825e09e01e60f4168cdca86260f67440e22bd74c1280b723fc47091d97345f0ddcf96a41bef57873
- SSDEEP 6144:U/L2BQ+g+geZ/KEv1ncsSm1G9hkObh1PeGU9aX1HQHCoPb7JF5SiHgkC6:qmQ+iNMjGg3rMk
- TLSH T11E84C7257FA88D10D590257ECA7E3609CB26E0F225026347370AF7A68D059DEDE2D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hrev9fubhtuxdxrt.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
dar.cantdown.su:1717
Targets
-
- Target hrev9fubhtuxdxrt.exe
- Size 364KB
- SHA256 17044319e1d0ba4d265953463c70a695f5842f75e4b3531b2cec2097a61e40c6
- MD5 02fc551819928e7f57d30cc7c19b1972
- SHA1 e7e060fff8a96e35f6233a745ef153292866fceb
- SHA512 36effd40f1555dc130cade9016e914c4e3bdf20b601bf98f825e09e01e60f4168cdca86260f67440e22bd74c1280b723fc47091d97345f0ddcf96a41bef57873
- SSDEEP 6144:U/L2BQ+g+geZ/KEv1ncsSm1G9hkObh1PeGU9aX1HQHCoPb7JF5SiHgkC6:qmQ+iNMjGg3rMk
- TLSH T11E84C7257FA88D10D590257ECA7E3609CB26E0F225026347370AF7A68D059DEDE2D3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.