sliver | 2024-05-15_c13f0bd7bcbd72f969e0ba820ec303b6_sliver_snatch | Triage

Sharing

General

Target

2024-05-15_c13f0bd7bcbd72f969e0ba820ec303b6_sliver_snatch
Size

15.6MB
MD5

c13f0bd7bcbd72f969e0ba820ec303b6
SHA1

b2aac57c142b87c8fe35d83a3b877dee7705d5c8
SHA256

01b6bfa9d168505379005028b4f1c8307db6c8728170eb89d47326647941507e
SHA512

3c2006eda1b9e38877441b74252c01666968b96441d216a8024f1b9fbd56bfa57126234d83021e2608a11cdae297af836ec12859c0e28d0f3bb0a48b25023bb9
SSDEEP

98304:7UqWuUrjg2hBJO8r9JLiSisSBqkXBLfSgs9+CmEGGY4:7khfgIJLjisSBxBLfSZ9ZD04

Score

10^/10

sliver

Malware Config

Signatures

Sliver RAT v2 1 IoCs

resource	yara_rule
sample	SliverRAT_v2

Sliver family
sliver

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_c13f0bd7bcbd72f969e0ba820ec303b6_sliver_snatch

Files

2024-05-15_c13f0bd7bcbd72f969e0ba820ec303b6_sliver_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ