sliver | 303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74 | Triage

Sharing

General

Target

303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74.exe
Size

18.6MB
Sample

241007-bm8jaawhkj
MD5

373eb47a07dceb67a31a25407d943cf3
SHA1

c947f33e8663938049847378eda362cc2057fa60
SHA256

303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74
SHA512

3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b
SSDEEP

196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs

Score

10^/10

sliver discovery

Malware Config

Targets

- Target
  
  303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74.exe
- Size
  
  18.6MB
- MD5
  
  373eb47a07dceb67a31a25407d943cf3
- SHA1
  
  c947f33e8663938049847378eda362cc2057fa60
- SHA256
  
  303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74
- SHA512
  
  3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b
- SSDEEP
  
  196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs
Score

7^/10

discovery
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2