Extracted

• • Target

    9c43394c6d2ba2f266fe7971fd4ad35248bf358483b80ada5d649dd54548f169

  • Size

    46KB

  • MD5

    ac77a8bda447bdb92699c17902228d62

  • SHA1

    57f5a4c110dbe515fb6732db7694f1047e744d33

  • SHA256

    9c43394c6d2ba2f266fe7971fd4ad35248bf358483b80ada5d649dd54548f169

  • SHA512

    90836243e05d12c87fd5cbf1369fe371e42e52a720fce388b6f21b690b5078b68d79d0197b8725e391fd15db5143d57c5515ab90cb9cc32f04a0fa7ebaa56d49

  • SSDEEP

    768:/4SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:ASFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2