General
- Target TEST.exe
- Size 824KB
- Sample261102-w2c15sev8j
- SHA256 3263deb212828c928a36c18a50dafc3275770ee0deef0527135a7a2542856098
- MD5 e1005fc263192fe919ee4e96241ddd47
- SHA1 f541202d36f63146d8af0d91573cecce6529f3e1
- SHA512 13c0f2a0e0ab8bf8f42cf292eba3c11633f91d3348261ebbba89fca266dafd943d7138586cbea9ab261c246db81070b81cb12969610c8477301f4c75495bff02
- SSDEEP 12288:ltbaBE4F3sORQT8s7eobJxurazJuDZyNVZtAfHDmt79K3haFjkw10KsqKYNl:Y+FjxHGZyLZtAPDmZ2oFgnVcNl
- TLSH T1DD0508183B94CA01E640267F56DA0550D73260F27313AB47BB0BE7B91D44AFEED6C2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TEST.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
sheetrat
Version
-
1.8
C2
-
xcl.cantdown.su:1696
Targets
-
- Target TEST.exe
- Size 824KB
- SHA256 3263deb212828c928a36c18a50dafc3275770ee0deef0527135a7a2542856098
- MD5 e1005fc263192fe919ee4e96241ddd47
- SHA1 f541202d36f63146d8af0d91573cecce6529f3e1
- SHA512 13c0f2a0e0ab8bf8f42cf292eba3c11633f91d3348261ebbba89fca266dafd943d7138586cbea9ab261c246db81070b81cb12969610c8477301f4c75495bff02
- SSDEEP 12288:ltbaBE4F3sORQT8s7eobJxurazJuDZyNVZtAfHDmt79K3haFjkw10KsqKYNl:Y+FjxHGZyLZtAPDmZ2oFgnVcNl
- TLSH T1DD0508183B94CA01E640267F56DA0550D73260F27313AB47BB0BE7B91D44AFEED6C2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Sheetrat obfuscated V1.8 and higher
Sheetrat aka NonEuclid RAT is a trojan written in C#.
-
Detects Sheetrat obfuscated version