b9dcc8549db96b5e7c34de27a99e7253374b9846b4de3780e414cd6b487383a9 | Triage

Sharing

General

Target

4369ebeb8f80c333e054687cbb33ece0.exe
Size

244KB
Sample

240706-fd7b3sycqd
MD5

4369ebeb8f80c333e054687cbb33ece0
SHA1

29acd85fa76fa3c210efc053c88f1891811ba17c
SHA256

b9dcc8549db96b5e7c34de27a99e7253374b9846b4de3780e414cd6b487383a9
SHA512

b589b5c5ec6cdeaabe7adb524382a7ba2ea7ccf6eb865ed9dc1369156bbf7a533597187bba760c805497cac94547f984ef3537c021a009bf0e113e88531cfd14
SSDEEP

3072:RbXLbfyOyyCxqji60EQ7ce3FXNA6FbR+9++ecpnsIo:ly8An60Bce3FXNA6FbR+9++xZ

Score

7^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  4369ebeb8f80c333e054687cbb33ece0.exe
- Size
  
  244KB
- MD5
  
  4369ebeb8f80c333e054687cbb33ece0
- SHA1
  
  29acd85fa76fa3c210efc053c88f1891811ba17c
- SHA256
  
  b9dcc8549db96b5e7c34de27a99e7253374b9846b4de3780e414cd6b487383a9
- SHA512
  
  b589b5c5ec6cdeaabe7adb524382a7ba2ea7ccf6eb865ed9dc1369156bbf7a533597187bba760c805497cac94547f984ef3537c021a009bf0e113e88531cfd14
- SSDEEP
  
  3072:RbXLbfyOyyCxqji60EQ7ce3FXNA6FbR+9++ecpnsIo:ly8An60Bce3FXNA6FbR+9++xZ
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation