Overview

overview

8

Static

static

7

IFPDZ.Protection.dll

windows10-1703-x64

1

Renci.SshNet.dll

windows10-1703-x64

1

Sliver 5.exe

windows10-1703-x64

8

ref/LIBEAY32.dll

windows10-1703-x64

1

ref/SSLEAY32.dll

windows10-1703-x64

1

ref/bz2.dll

windows10-1703-x64

1

ref/getopt.dll

windows10-1703-x64

1

ref/idevice_id.exe

windows10-1703-x64

1

ref/idevic...on.dll

windows10-1703-x64

1

ref/idevic...on.exe

windows10-1703-x64

1

ref/idevicebackup.exe

windows10-1703-x64

1

ref/idevic...p2.exe

windows10-1703-x64

1

ref/idevic...rt.exe

windows10-1703-x64

1

ref/idevicedate.exe

windows10-1703-x64

1

ref/idevicedebug.exe

windows10-1703-x64

1

ref/idevic...xy.exe

windows10-1703-x64

1

ref/idevic...cs.exe

windows10-1703-x64

1

ref/idevic...ry.exe

windows10-1703-x64

1

ref/idevic...er.exe

windows10-1703-x64

1

ref/ideviceinfo.exe

windows10-1703-x64

1

ref/idevic...er.exe

windows10-1703-x64

1

ref/idevicename.exe

windows10-1703-x64

1

ref/idevic...xy.exe

windows10-1703-x64

1

ref/idevicepair.exe

windows10-1703-x64

1

ref/idevic...on.exe

windows10-1703-x64

1

ref/idevic...re.exe

windows10-1703-x64

1

ref/idevic...ot.exe

windows10-1703-x64

1

ref/idevicesyslog.exe

windows10-1703-x64

1

ref/imobil...se.dll

windows10-1703-x64

1

ref/imobiledevice.dll

windows10-1703-x64

1

ref/info.exe

windows10-1703-x64

1

ref/ios_we...xy.exe

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Sliver5.zip

  • Size

    4.0MB

  • MD5

    8a8a38d96f422aeb5b6eab523fb56524

  • SHA1

    5426a047ac480ea3ce8dd974493b6b98cb317a02

  • SHA256

    10638b1b21e30b12ddf9e7c14e3276481281e7ba6faae6191f475f96e58eea78

  • SHA512

    0f227e2ce1b4735a309ca78ad571ceba7d348c877972f44f738546518e6412fbf756b39d0fbd674340d5c3c24ce0c71051bdb266969cacf0877328fac439101c

  • SSDEEP

    98304:GecEMM/O1oQ1wu8ZZPD4ZcJP5Wx3vt/vo+heUEYT8riqOb:RclM2tqZDr6YGvt/vDE/jOb

Score
7/10
agilenet

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 2 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet
  • Unsigned PE 54 IoCs

    Checks for missing Authenticode signature.

Files

  • Sliver5.zip
    .zip
  • IFPDZ.Protection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Renci.SshNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Sliver 5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ref/LIBEAY32.dll
    .dll windows:6 windows x64 arch:x64

    d616c61ea5b377f503af8db86d46bf25


    Headers

    Imports

    Exports

    Sections

  • ref/SSLEAY32.dll
    .dll windows:6 windows x64 arch:x64

    5c71640db8f86d26bff135d45f311cf6


    Headers

    Imports

    Exports

    Sections

  • ref/bz2.dll
    .dll windows:6 windows x64 arch:x64

    250c242bc4ff9b2842c7a6cb04d4faf6


    Headers

    Imports

    Exports

    Sections

  • ref/getopt.dll
    .dll windows:6 windows x64 arch:x64

    d241e1ebf18aef97a56fa5ddeaf11c4c


    Headers

    Imports

    Exports

    Sections

  • ref/idevice_id.exe
    .exe windows:6 windows x64 arch:x64

    808cad2d92c2ccf265bbf5da423ffada


    Headers

    Imports

    Sections

  • ref/ideviceactivation.dll
    .dll windows:6 windows x64 arch:x64

    6803e60666484b5da1e8760667d32afe


    Headers

    Imports

    Exports

    Sections

  • ref/ideviceactivation.exe
    .exe windows:6 windows x64 arch:x64

    89b62278d18656be68b5d3d708bc5c23


    Headers

    Imports

    Sections

  • ref/idevicebackup.exe
    .exe windows:6 windows x64 arch:x64

    bb93d8fc5c9253cb49c2a8a80592032d


    Headers

    Imports

    Sections

  • ref/idevicebackup2.exe
    .exe windows:6 windows x64 arch:x64

    a9828c7dedd34fa0e65d1a9878fe9018


    Headers

    Imports

    Sections

  • ref/idevicecrashreport.exe
    .exe windows:6 windows x64 arch:x64

    cc8bcb796f75446b96621ccb064b8eeb


    Headers

    Imports

    Sections

  • ref/idevicedate.exe
    .exe windows:6 windows x64 arch:x64

    f6679c2ec0fb1c445c9d8aba8f0b60af


    Headers

    Imports

    Sections

  • ref/idevicedebug.exe
    .exe windows:6 windows x64 arch:x64

    d94eb67f27cb7b280aac86fc601db670


    Headers

    Imports

    Sections

  • ref/idevicedebugserverproxy.exe
    .exe windows:6 windows x64 arch:x64

    c280b183bf54a4b6e913f2074d2b9e85


    Headers

    Imports

    Sections

  • ref/idevicediagnostics.exe
    .exe windows:6 windows x64 arch:x64

    a1eea0eedc356c76c02fc35ce37c451a


    Headers

    Imports

    Sections

  • ref/ideviceenterrecovery.exe
    .exe windows:6 windows x64 arch:x64

    ee8740a4a2341520185de205dc5d7d55


    Headers

    Imports

    Sections

  • ref/ideviceimagemounter.exe
    .exe windows:6 windows x64 arch:x64

    2491ed274c29ef3692a0b33d86229b9e


    Headers

    Imports

    Sections

  • ref/ideviceinfo.exe
    .exe windows:6 windows x64 arch:x64

    313f08433e0871939b1dbdb197b8c964


    Headers

    Imports

    Sections

  • ref/ideviceinstaller.exe
    .exe windows:6 windows x64 arch:x64

    ec4ba77e87a354fb387267b429b341c8


    Headers

    Imports

    Sections

  • ref/idevicename.exe
    .exe windows:6 windows x64 arch:x64

    c2356c896beb61cc8e0655cbb0de0c9f


    Headers

    Imports

    Sections

  • ref/idevicenotificationproxy.exe
    .exe windows:6 windows x64 arch:x64

    2c8adcfd929ead7e193ab1e8b762c079


    Headers

    Imports

    Sections

  • ref/idevicepair.exe
    .exe windows:6 windows x64 arch:x64

    4a2d8677501fe39f8f8adb085067f66b


    Headers

    Imports

    Sections

  • ref/ideviceprovision.exe
    .exe windows:6 windows x64 arch:x64

    609ea515f32cb985d01bf1859ece8257


    Headers

    Imports

    Sections

  • ref/idevicerestore.exe
    .exe windows:6 windows x64 arch:x64

    a1162e59ce3efe85d10b71c7ff476c6c


    Headers

    Imports

    Sections

  • ref/idevicescreenshot.exe
    .exe windows:6 windows x64 arch:x64

    f84dfc51d90cf42c7cb0129511486273


    Headers

    Imports

    Sections

  • ref/idevicesyslog.exe
    .exe windows:6 windows x64 arch:x64

    38d38cdd0f33628f9c65a12f9da7ef5c


    Headers

    Imports

    Sections

  • ref/imobiledevice-net-lighthouse.dll
    .dll windows:6 windows x64 arch:x64

    e533a869d1bcfad4b2b0d69c5d8dfc25


    Headers

    Imports

    Exports

    Sections

  • ref/imobiledevice.dll
    .dll windows:6 windows x64 arch:x64

    ae2e5ca399d4656d302cc04afbdae394


    Headers

    Imports

    Exports

    Sections

  • ref/info.exe
    .exe windows:6 windows x64 arch:x64

    313f08433e0871939b1dbdb197b8c964


    Headers

    Imports

    Sections

  • ref/ios_webkit_debug_proxy.exe
    .exe windows:6 windows x64 arch:x64

    6794223cdfa2318d6c85797b26b4b35b


    Headers

    Imports

    Sections

  • ref/iproxy.exe
    .exe windows:6 windows x64 arch:x64

    9c52884a33aea0ce421a283b82d19e0b


    Headers

    Imports

    Sections

  • ref/irecovery.dll
    .dll windows:6 windows x64 arch:x64

    3e3eafe475f420d28c8e526b3ad439b6


    Headers

    Imports

    Exports

    Sections

  • ref/irecovery.exe
    .exe windows:6 windows x64 arch:x64

    bb829518c3e35176423c127c9605e3d9


    Headers

    Imports

    Sections

  • ref/iremoval
    .macho macos arch:arm64
  • ref/libcharset.dll
    .dll windows:6 windows x64 arch:x64

    975e6234b4679c35cd800150985fc1df


    Headers

    Imports

    Exports

    Sections

  • ref/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    73a820a7c996da80393e72568ffc92ea


    Headers

    Imports

    Exports

    Sections

  • ref/libiconv.dll
    .dll windows:6 windows x64 arch:x64

    3303d916eb65d221d0784561f7274f46


    Headers

    Imports

    Exports

    Sections

  • ref/libusb-1.0.dll
    .dll windows:6 windows x64 arch:x64

    b2da45a41634a85cca953c9b4d3d1824


    Headers

    Imports

    Exports

    Sections

  • ref/libusb0.dll
    .dll windows:6 windows x64 arch:x64

    9498967164a796b6d530c86ebc2f3628


    Headers

    Imports

    Exports

    Sections

  • ref/libxml2.dll
    .dll windows:6 windows x64 arch:x64

    95ea11a36f8ac402b77ab8ec6f0814b4


    Headers

    Imports

    Exports

    Sections

  • ref/lzma.dll
    .dll windows:6 windows x64 arch:x64

    7950f4177951bd0dc1c676a59abbf92a


    Headers

    Imports

    Exports

    Sections

  • ref/pcre.dll
    .dll windows:6 windows x64 arch:x64

    21a09f854b56bdd5dfb09f8e97b18b39


    Headers

    Imports

    Exports

    Sections

  • ref/pcreposix.dll
    .dll windows:6 windows x64 arch:x64

    829e50cf9b1abbca7d2d5a9a9a826348


    Headers

    Imports

    Exports

    Sections

  • ref/plist.dll
    .dll windows:6 windows x64 arch:x64

    7a96382b4a0c1e0ace6f59c19e8adb54


    Headers

    Imports

    Exports

    Sections

  • ref/plist_cmp.exe
    .exe windows:6 windows x64 arch:x64

    e09564d404cf043779046ac52e71c5ec


    Headers

    Imports

    Sections

  • ref/plist_test.exe
    .exe windows:6 windows x64 arch:x64

    dee379b754b17f15daa2b582dde29f17


    Headers

    Imports

    Sections

  • ref/plistutil.exe
    .exe windows:6 windows x64 arch:x64

    832e078cb56c16f3a980a2ceb4ce910e


    Headers

    Imports

    Sections

  • ref/pthreadVC3.dll
    .dll windows:6 windows x64 arch:x64

    10da88cadfe088de04539ca6d6b328c5


    Headers

    Imports

    Exports

    Sections

  • ref/readline.dll
    .dll windows:6 windows x64 arch:x64

    9d5d299e2acc7584bfe87e19012a8f02


    Headers

    Imports

    Exports

    Sections

  • ref/usbmuxd.dll
    .dll windows:6 windows x64 arch:x64

    8b020d458c8a35923f6d1039243c6b98


    Headers

    Imports

    Exports

    Sections

  • ref/usbmuxd.exe
    .exe windows:6 windows x64 arch:x64

    65cf15f5f6e8d5e18921baf8200a0184


    Headers

    Imports

    Sections

  • ref/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    f49ac71a58dd00b20fff27fd20515fff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ref/zip.dll
    .dll windows:6 windows x64 arch:x64

    3386326ccc36f5cbe32a47e0d8c005ba


    Headers

    Imports

    Exports

    Sections

  • ref/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    3e00cc5294fc2fcbabd14c323443ba4e


    Headers

    Imports

    Exports

    Sections