Extracted

• • Target

    e958c7960d354a86b54b72064200d3dce489f588147d86ed7c7e9a6252c6ea0a

  • Size

    46KB

  • MD5

    058a72e7a27017cac0d87d2181737e5c

  • SHA1

    ac057c406c374ff8eae0184852ef739ed54728e5

  • SHA256

    e958c7960d354a86b54b72064200d3dce489f588147d86ed7c7e9a6252c6ea0a

  • SHA512

    056e3ed6698e2d7549d7203ab82c4e6f1675010de812446de611010d24d8d4b3e78f3ec522c96917bd36c77eeacb495ccfd8a4a1c154db5e1e163efb75b5c1ca

  • SSDEEP

    768:o4SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:jSFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2