Overview

overview

10

Static

static

3

joeseph-Lu...ed.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    joeseph-Luna-Logged.exe
  • Size 13.2MB
  • Sample240804-vhpp6avbqd
  • SHA256 e456ee3e4e60b14525e3a2f0b0ca1bda82afcc1fa9ba9696f60c6297c4d01390
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sliverbackdoordefense_evasiondiscoveryexecutiontrojan

Malware Config

Targets

    • Target
      joeseph-Luna-Logged.exe
    • Size 13.2MB
    • SHA256 e456ee3e4e60b14525e3a2f0b0ca1bda82afcc1fa9ba9696f60c6297c4d01390
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    sliverbackdoordefense_evasiondiscoveryexecutiontrojan

    • Sliver RAT v2

    • SliverRAT

      SliverRAT is an open source Adversary Emulation Framework.

      trojanbackdoorsliver

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks