Extracted

• • Target

    d3645c6f005381366ad46a3258ae9b7596b2f6be6e7cb17f1919e6e11379e58f

  • Size

    46KB

  • MD5

    88d24e11d952ac036b9bcc1578211f67

  • SHA1

    8854515373e2d1449f91f027cfa467d1272287e9

  • SHA256

    d3645c6f005381366ad46a3258ae9b7596b2f6be6e7cb17f1919e6e11379e58f

  • SHA512

    b2d44d8851a5e70afb1473ef82f89ac40c0dec3a56ecd5db9c381635188bc78e9c64dd4acce6e31db563c8fc9bb7a20c760f2164ae7608709e1c513abd6f82d1

  • SSDEEP

    768:T4SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:USFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2