Analysis
- max time kernel
143s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system - submitted
08/12/2023, 14:58
Behavioral task
behavioral1
Sample
01cf9e5137481e4146b7650581c7841ae54af16d57327cbfee9305f6bd891b02.exe
Resource
win7-20231130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
01cf9e5137481e4146b7650581c7841ae54af16d57327cbfee9305f6bd891b02.exe
Resource
win10v2004-20231127-en
3 signatures
150 seconds
General
- Target 01cf9e5137481e4146b7650581c7841ae54af16d57327cbfee9305f6bd891b02.exe
- Size 5.0MB
- Sample231208-sb6c8acbf2
- SHA256 01cf9e5137481e4146b7650581c7841ae54af16d57327cbfee9305f6bd891b02
- MD5 8b8eed442ff12ea9184791bdf9966136
- SHA1 fa47012910c53e04910173a49fa0573cf23b412e
- SHA512 cd14494ce9c19475f6d9c22ab7bdf313aa7e3b77e656a30eb27c37b6ed501b8e622f59a4ae42e1932f8dde12c99f274bc011fb0a524369337116f287df272f8e
- SSDEEP 98304:jTdnAQrzR688xRPLlmD3BohSNKLrTxl9mIpVQOeRtXvXTzhuhk:VnPRNyvSqhdlzmIQOeRtrVuhk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Sliver 32-bit implant (with and without --debug flag at compile) 4 IoCs
slive 32bit malware detected.
resource yara_rule behavioral2/memory/3940-1-0x0000000000B60000-0x0000000001C80000-memory.dmp sliver_32bit behavioral2/memory/3940-3-0x0000000000B60000-0x0000000001C80000-memory.dmp sliver_32bit behavioral2/memory/3940-6-0x0000000000B60000-0x0000000001C80000-memory.dmp sliver_32bit behavioral2/memory/3940-12-0x0000000000B60000-0x0000000001C80000-memory.dmp sliver_32bit - Sliver Custom Detection 4 IoCs
slive malware detected.
resource yara_rule behavioral2/memory/3940-1-0x0000000000B60000-0x0000000001C80000-memory.dmp slive_custom behavioral2/memory/3940-3-0x0000000000B60000-0x0000000001C80000-memory.dmp slive_custom behavioral2/memory/3940-6-0x0000000000B60000-0x0000000001C80000-memory.dmp slive_custom behavioral2/memory/3940-12-0x0000000000B60000-0x0000000001C80000-memory.dmp slive_custom -
resource yara_rule behavioral2/memory/3940-0-0x0000000000B60000-0x0000000001C80000-memory.dmp upx behavioral2/memory/3940-1-0x0000000000B60000-0x0000000001C80000-memory.dmp upx behavioral2/memory/3940-3-0x0000000000B60000-0x0000000001C80000-memory.dmp upx behavioral2/memory/3940-6-0x0000000000B60000-0x0000000001C80000-memory.dmp upx behavioral2/memory/3940-12-0x0000000000B60000-0x0000000001C80000-memory.dmp upx