Extracted

• • Target

    805984664b76d75b083fa4561dbf0f492cd19515fc9c40f1c9fdb65c9e7911a3

  • Size

    46KB

  • MD5

    236f5c306176468cac13411c07e29726

  • SHA1

    181a335912f689337a35685a728993199512c37a

  • SHA256

    805984664b76d75b083fa4561dbf0f492cd19515fc9c40f1c9fdb65c9e7911a3

  • SHA512

    c8f3c023c3a2d8ed8d438aab86b9ca01ab1538fb264c8fea382ecb462b05870d0a4bbda730be86cf2ec33d61450221f4fb0fb660c164b2370c02acfc132d4cd1

  • SSDEEP

    768:G4SFsv66g3KnF439NKC54kkGfn+cL2XdA8YRtukODXwXqt7sNAQYzKEm8ZRu9Uzp:1SFsv66g3KnF439NKC54kkGfn+cL2Xd+

  Score

  10^/10

  sliverbackdoordiscoveryexecutiontrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sliver RAT v2

  • Sliver family

    sliver

  • SliverRAT

    SliverRAT is an open source Adversary Emulation Framework.

    trojanbackdoorsliver

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2