Derp.ca
← All malware

4e410af510f1c7cf788e79b7b68d1cd14d01a9bc57a133d598c9c697f85bd5ee

Live Scan Result: Tria.ge
Score
10/10

Threat Level

Known Bad

Malware Family
Sheetrat

Last Seen Mar 1, 2026

TrojanCampaign:sheet YgttlqcexjngExecutionPersistencePrivilege Escalation

MITRE Behavior Map

Execution (TA0002)

  • Scheduled Task (T1053.005)

Persistence (TA0003)

  • Scheduled Task (T1053.005)
  • AppInit DLLs (T1546.010)
  • Registry Run Keys / Startup Folder (T1547.001)
  • Winlogon Helper DLL (T1547.004)

Privilege Escalation (TA0004)

  • Scheduled Task (T1053.005)
  • AppInit DLLs (T1546.010)
  • Registry Run Keys / Startup Folder (T1547.001)
  • Winlogon Helper DLL (T1547.004)

Defense Evasion (TA0005)

  • Modify Registry (T1112)

Discovery (TA0007)

  • Query Registry (T1012)
  • System Information Discovery (T1082)

Hostnames

1
  1. 1.slava22-59029.portmap.host