Extracted

• • Target

    4ae151e76c7d2da0d855f92abf58bd44c00a18eaadb7550f46507aae9c07caad

  • Size

    46KB

  • MD5

    5f292d4cf9f505eca69bf6ce3905319a

  • SHA1

    5b77b73b29c78a54066a4d059ddb1ddd416d7b93

  • SHA256

    4ae151e76c7d2da0d855f92abf58bd44c00a18eaadb7550f46507aae9c07caad

  • SHA512

    ac71e214369caf1cb43cf0fabfe4268321985f69024a622721f5e359908c9d0ede008f1d0d9d9053689a2d94dd0bd504b9678ca5afab10591c9c506c08b3caa8

  • SSDEEP

    768:w4SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:7SFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2