General
-
Target
cee76e00f1a91bc0bac40e48c7ef620a9163856ccc46ae589d999fa598dffbf8
-
Size
5.3MB
-
MD5
6ad6461c081d5879adb652c37be4dfe2
-
SHA1
fe79e79566fc07e39d8ba12a43f4e1b841e17e85
-
SHA256
cee76e00f1a91bc0bac40e48c7ef620a9163856ccc46ae589d999fa598dffbf8
-
SHA512
32ae96c0f6f2e770f9c27b7f4e16fd24b46eb8b44e96ae7e9d094856e17b9a90d62db09dd90ac9bc2d64d4a89bc78fc797e64534d5f9d8e35d5245dd458d81d5
-
SSDEEP
98304:kNzRJqc1Sb2OZ0h+YlwHqRWxj6ZQGmD/rC4ASbKXEiVeWfSjtRxaI6ioeDrzLvT+:IR60IYlwiu6CrbAF4I0au3HPT02
Score
10/10
Malware Config
Signatures
-
Slive family
-
Sliver 32-bit implant (with and without --debug flag at compile) 1 IoCs
slive 32bit malware detected.
-
Sliver Custom Detection 1 IoCs
slive malware detected.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
cee76e00f1a91bc0bac40e48c7ef620a9163856ccc46ae589d999fa598dffbf8
Headers
Sections
-
out.upx
Headers
Sections