General

  • Target

    sliver-server_linux

  • Size

    192.7MB

  • Sample

    221112-wpdrxaca6z

  • MD5

    42031b2317e99abdb91c95188056093f

  • SHA1

    c922a24c730f4948c094f5d314bfa7d528341ed8

  • SHA256

    5e25477af34314dc8fd4fe2013845ec55572ac213148b70499b928bc4af1f1c1

  • SHA512

    e6dc4bc64fadfbcef9fe4c11ca4e5b1341aed23b273b7d5305aa47ed16fb7ea337e1e4d767569f3230ac47bf181b498db0615a92df2b18d4b6914d87ffa62623

  • SSDEEP

    3145728:+s730yJtDa7gu/IRJXtv0Wpy3PcynhPS+3niQsJPbQuo600Sl5Katy8WlV:+e3DD4gu/SNIPct+3iZJPFC/p9W

Score
10/10

Malware Config

Targets

    • Target

      sliver-server_linux

    • Size

      192.7MB

    • MD5

      42031b2317e99abdb91c95188056093f

    • SHA1

      c922a24c730f4948c094f5d314bfa7d528341ed8

    • SHA256

      5e25477af34314dc8fd4fe2013845ec55572ac213148b70499b928bc4af1f1c1

    • SHA512

      e6dc4bc64fadfbcef9fe4c11ca4e5b1341aed23b273b7d5305aa47ed16fb7ea337e1e4d767569f3230ac47bf181b498db0615a92df2b18d4b6914d87ffa62623

    • SSDEEP

      3145728:+s730yJtDa7gu/IRJXtv0Wpy3PcynhPS+3niQsJPbQuo600Sl5Katy8WlV:+e3DD4gu/SNIPct+3iZJPFC/p9W

    Score
    5/10
    • Enumerates kernel/hardware configuration

      Reads contents of /sys virtual filesystem to enumerate system information.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks