Analysis
- max time kernel
149s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
25/12/2023, 17:03
General
- Target 934dd7c0132140f4edd6a3fe33219870c957bdd860dfd454638f0cba9344edfd.exe
- Size 5.9MB
- Sample231225-vknwmschc5
- SHA256 934dd7c0132140f4edd6a3fe33219870c957bdd860dfd454638f0cba9344edfd
Score
10/10
Malware Config
Signatures
- Sliver 32-bit implant (with and without --debug flag at compile) 4 IoCs
slive 32bit malware detected.
- Sliver Custom Detection 3 IoCs
slive malware detected.
- UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\934dd7c0132140f4edd6a3fe33219870c957bdd860dfd454638f0cba9344edfd.exe"C:\Users\Admin\AppData\Local\Temp\934dd7c0132140f4edd6a3fe33219870c957bdd860dfd454638f0cba9344edfd.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1156-0-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-1-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-2-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-5-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-11-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-13-0x0000000000B40000-0x0000000001C68000-memory.dmp
memory/1156-14-0x0000000000B40000-0x0000000001C68000-memory.dmp