Overview

overview

10

Static

static

3

53.sfx.exe

windows7-x64

7

53.sfx.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53.sfx.exe

  • Size

    16.0MB

  • Sample

    240703-waeqnazhpq

  • MD5

    238408d9c101ac65d5b76d1e09b1e988

  • SHA1

    0b7d0b03d5675f8fce4727c2934a3e18f1fc3f6e

  • SHA256

    f3bbe1a5228e850a4ebe19021187faacfbb8a802f458bfc9dc7e95bef23ea67d

  • SHA512

    54de94724222ec095e8e18f8f90f31fe6ffdaeb7dd705aad3e09fb91d63fe976f17739ec48f5413c0f15cf0c47f87b5b29972d58f6b340fc9688bdd29a15802a

  • SSDEEP

    196608:o8WrlGLhX0/0wStVsWaKBo1O9f6ouryr3UfeIDQkr1bw6uMuxdWQmVQhYTwygXn2:DMMe3KBo1O16ou63uFUH9xdsT5MqfxJv

Score
10/10
sliverbackdoortrojan

Malware Config

Targets

    • Target

      53.sfx.exe

    • Size

      16.0MB

    • MD5

      238408d9c101ac65d5b76d1e09b1e988

    • SHA1

      0b7d0b03d5675f8fce4727c2934a3e18f1fc3f6e

    • SHA256

      f3bbe1a5228e850a4ebe19021187faacfbb8a802f458bfc9dc7e95bef23ea67d

    • SHA512

      54de94724222ec095e8e18f8f90f31fe6ffdaeb7dd705aad3e09fb91d63fe976f17739ec48f5413c0f15cf0c47f87b5b29972d58f6b340fc9688bdd29a15802a

    • SSDEEP

      196608:o8WrlGLhX0/0wStVsWaKBo1O9f6ouryr3UfeIDQkr1bw6uMuxdWQmVQhYTwygXn2:DMMe3KBo1O16ou63uFUH9xdsT5MqfxJv

    Score
    10/10
    sliverbackdoortrojan

    • Sliver RAT v2

    • SliverRAT

      SliverRAT is an open source Adversary Emulation Framework.

      trojanbackdoorsliver

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks