General

  • Target

    SilverClient.exe

  • Size

    38KB

  • Sample

    240701-zczemasblq

  • MD5

    71cfd19b2ac1363de384769bdd9108df

  • SHA1

    3ce573ec493a43f216eebe1a04cb28e44071109c

  • SHA256

    c821bbc30312685455eee869000588f598eb5016029730d33db11cdf82a4e132

  • SHA512

    83f6fa85455da132f810fc1ea174ba6c903c01355fb56106956304e96f0507d5d9525b87f261f7f6d6455e5bd47162cbba536a8bc99ebad2831010daf0839316

  • SSDEEP

    768:TWEDD5eEmGLDT3QyLCTi1EWghY5jAnCRUC9fqAAB6SLxUr1E:TvD1L1CeEthk8nCGC9SAAoaxUr1E

Score
10/10

Malware Config

Extracted

Family

silverrat

Version

1.0.0.0

C2

austin22-62046.portmap.host:62046

Mutex

SilverMutex_zSgoXCAVYC

Attributes
  • certificate

    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

  • decrypted_key

    -|S.S.S|-

  • key

    yy6zDjAUmbB09pKvo5Hhug==

  • key_x509

    UnpDa0Fwa0N1amFLQ25ZaHd4bXhqZElyaVNURFBH

  • reconnect_delay

    5

  • server_signature

    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

Targets

    • Target

      SilverClient.exe

    • Size

      38KB

    • MD5

      71cfd19b2ac1363de384769bdd9108df

    • SHA1

      3ce573ec493a43f216eebe1a04cb28e44071109c

    • SHA256

      c821bbc30312685455eee869000588f598eb5016029730d33db11cdf82a4e132

    • SHA512

      83f6fa85455da132f810fc1ea174ba6c903c01355fb56106956304e96f0507d5d9525b87f261f7f6d6455e5bd47162cbba536a8bc99ebad2831010daf0839316

    • SSDEEP

      768:TWEDD5eEmGLDT3QyLCTi1EWghY5jAnCRUC9fqAAB6SLxUr1E:TvD1L1CeEthk8nCGC9SAAoaxUr1E

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks