Analysis
-
max time kernel
314s -
max time network
1598s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
-
submitted
05-12-2023 01:47
General
-
Target
SilverRAT_Cracked.zip
-
Size
19.9MB
-
MD5
16ec66ff42a4dc6de8378d24cb6162df
-
SHA1
0755d6015feb665554a7568246cd1119d90e6007
-
SHA256
4d8ba52f4b0199bec10b90f156a7f56c87200d94c1bbff2f4c6ba53bea4b51ac
-
SHA512
5fcd035491bb75039dfdcafd54bc86e7aa524cd88d5a04b13757f23a006ec902f564f08ac59c9bb34cb2a059c09d69058883ea8b1dba622134d48544bc108838
-
SSDEEP
393216:rO+hpxoY/hFNqfeHJVOUQrSmQoKMn2ruEfxaPHD4dzu1zDrh7txMDKIZ/YnS:rO+zxdprpVOUSTpKDhfsPj7N7tGDDZgS
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\SilverRAT_Cracked.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\SilverRAT_Cracked\" -spe -an -ai#7zMap11400:114:7zEvent238021⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Users\Admin\Desktop\SilverRAT.exe"C:\Users\Admin\Desktop\SilverRAT.exe"1⤵
- Executes dropped EXE
-
C:\Users\Admin\Desktop\SilverRAT.exe"C:\Users\Admin\Desktop\SilverRAT.exe"1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19.9MB
MD55f7063dedfda5c9d99fed5a824cecaf3
SHA178810dae4c4e8f2732d9e368e38544ffea0d8484
SHA256a9fa8e14080792b67a12f682a336c0ea9ff463bbcb27955644c6fcaf80023641
SHA512c619d216e4b8db978ffdf3dca10048d582bf0e35fc56b8240b73228363cebb119b19ea14a5a7166f196fc9ea2f11cd1727b8badd077a911e0237d4a3bfa6201a
-
Filesize
19.9MB
MD55f7063dedfda5c9d99fed5a824cecaf3
SHA178810dae4c4e8f2732d9e368e38544ffea0d8484
SHA256a9fa8e14080792b67a12f682a336c0ea9ff463bbcb27955644c6fcaf80023641
SHA512c619d216e4b8db978ffdf3dca10048d582bf0e35fc56b8240b73228363cebb119b19ea14a5a7166f196fc9ea2f11cd1727b8badd077a911e0237d4a3bfa6201a
-
Filesize
19.9MB
MD55f7063dedfda5c9d99fed5a824cecaf3
SHA178810dae4c4e8f2732d9e368e38544ffea0d8484
SHA256a9fa8e14080792b67a12f682a336c0ea9ff463bbcb27955644c6fcaf80023641
SHA512c619d216e4b8db978ffdf3dca10048d582bf0e35fc56b8240b73228363cebb119b19ea14a5a7166f196fc9ea2f11cd1727b8badd077a911e0237d4a3bfa6201a
-
Filesize
6.9MB
-
Filesize
6.9MB