Extracted

• • Target

    311b845f45e0a066fbebcc3b75fe94cdcd2c4578634345f254b93f9c3dfc48b2

  • Size

    46KB

  • MD5

    7fd89567643fb7500b272127984b7e80

  • SHA1

    7b3eb36264ad0907f9a7bb9368ef8be69bb00d98

  • SHA256

    311b845f45e0a066fbebcc3b75fe94cdcd2c4578634345f254b93f9c3dfc48b2

  • SHA512

    f476903b4259b29ee5f36adc1f425cc105f3080373409a0d19b9558d827dbb9d747023ecd2b1afe8304e3ca043b921143a89bca8a61914e8e26ab6b83edccf4b

  • SSDEEP

    768:04SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:vSFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2