ff9f6ed7a1f136b3cb401865bfa54a87e4bd9415409ab7b4d344c89681a7f95d | Triage

Sharing

General

Target

ff9f6ed7a1f136b3cb401865bfa54a87e4bd9415409ab7b4d344c89681a7f95d
Size

293KB
Sample

240902-2c4epayfjn
MD5

7bb99d71c60fc6d11195df6272bc2646
SHA1

73af7ac0b54d46e63f5cd82e640a38f2e1315488
SHA256

ff9f6ed7a1f136b3cb401865bfa54a87e4bd9415409ab7b4d344c89681a7f95d
SHA512

11cc6c5a9cc3850af15bb6781a5dd30a08e57b21088e5964e682f549e1773690a3a169a5bf62bab94b6a47c91d56dbfb3cbec35e25aaeb39b2721c50d9991655
SSDEEP

6144:JtWFdmV8fpt2Qe+tyeSwe0tdYI1H/F8c4PW24F:rqmV8BMbD3weIDfGnPaF

Score

7^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  ff9f6ed7a1f136b3cb401865bfa54a87e4bd9415409ab7b4d344c89681a7f95d
- Size
  
  293KB
- MD5
  
  7bb99d71c60fc6d11195df6272bc2646
- SHA1
  
  73af7ac0b54d46e63f5cd82e640a38f2e1315488
- SHA256
  
  ff9f6ed7a1f136b3cb401865bfa54a87e4bd9415409ab7b4d344c89681a7f95d
- SHA512
  
  11cc6c5a9cc3850af15bb6781a5dd30a08e57b21088e5964e682f549e1773690a3a169a5bf62bab94b6a47c91d56dbfb3cbec35e25aaeb39b2721c50d9991655
- SSDEEP
  
  6144:JtWFdmV8fpt2Qe+tyeSwe0tdYI1H/F8c4PW24F:rqmV8BMbD3weIDfGnPaF
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation