General
- Target top-bs.png
- Size 1KB
- Sample260727-23dlystyew
- SHA256 4d66f28b70bb27f25aa21cb7f41fc2173a57de6dbe03b4528a06110cc9910982
Score
10/10
Malware Config
Targets
-
- Target top-bs.png
- Size 1KB
- SHA256 4d66f28b70bb27f25aa21cb7f41fc2173a57de6dbe03b4528a06110cc9910982
Score10/10-
Detects Sliver payload
-
Family: SliverRAT
SliverRAT is an open source Adversary Emulation Framework.
-
Sliver RAT v2
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1