555b9930e65f1182c71bc37891d0ca0e0b3d2e25f4ac8881b5c36b7eb54f418c

Sharing

Copy URL Twitter E-mail

General

Target
Medusa.zip
Size 110.8MB
Sample260723-kt1lpay1es
SHA256 555b9930e65f1182c71bc37891d0ca0e0b3d2e25f4ac8881b5c36b7eb54f418c
MD5 40e04d7b9ebf82e642afe96df304e74d
SHA1 76f8ef24d2ac3922fbd2fdace77989040fcc49db
SHA512 f3ecdeb02f0971a56131cc52caf2086b700033f4c0a6706b02393906e9adb69fefdac32dd8fa8fd9e27bcd932063378a1481d71614900c8087b76df0caf22275
SSDEEP 3145728:MDILIWHBO9kiYgEOI9vqsfewBQPd6/L2GDRuB:cIThO9yBOIwshS0/9uB
TLSH
T163483311B7250F25EB1099B5D29F733CDEAD875297A7B410084C09EAF9AC16D24EF38B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Medusa/Bin/MainMenu.dll
- Size 6.0MB
- SHA256 a9f9a6b5512a18d5977c41ee67e03ab291ad5227ed20e6192ee3b16ac688a997
- MD5 b32291668a1bd1651b380fc738886ed9
- SHA1 05ba9f49645b2d1541ce893eafc0af53d1a8e829
- SHA512 a101bc5b0c35bdd9cd3d34d9cd1b7c67a085671256e0bafd970015e6064c26d9a1442ff49729fdab6f2e03e18e511a000852d11d7166cc91022d38e5696af976
- SSDEEP 98304:uiA0ovc8P5yyOrpYUfYRaFft7dKsZj3Dse7NIoSJva1Hk3c+6jYvRd313ulgIDHj:u3v55JCAaoizhLHixz3LtYPui7mc
- TLSH
  T161562953976FC512F22594F8B7C6C979FE812A7838542E8FB2943341A6F31674932CB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Medusa/Bin/SuccessX.dll
- Size 1.4MB
- SHA256 1a94c197d062cdecd6c292bf2a9718fbf240f460936cbbe5cc321ac3406206b1
- MD5 c6c06a873d4f8872a4a5f60758774f14
- SHA1 dbfbda4951bfcaa64dacc294593054e92f3796b9
- SHA512 7cabd9080587989137434df3104b16b13fb73e58a8d1a022f650f2dd62cdf785afaa0249206366d375172cb81bb34d23038f4895e4f0b8bb6eb2f9956480c173
- SSDEEP 24576:xMTkzGqaynslkOPvKyOQkjYhdPAzxe8jNRgunWcc5Zg/KW4Zg/Wr:xC1oslkvY3Akou
- TLSH
  T1696523A9CB0FE9F1CA425482348B4F5327E189FCAA7D11FDD191F2DD88F92B0D49641A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Medusa/Data/OneCoreUAPCommonProxyStub
- Size 7.9MB
- SHA256 c9362fb3ccfb865da7194ac989dfade277e44d7049230b4148581efc687c99ff
- MD5 dc70e2fa1684815f82fb2fd5acf258ad
- SHA1 53bed8ab4e38f6fbfd4e05fd86cda9eec77378f7
- SHA512 34f643ff66322073b1e0d669137d5e6c7ead648baf7cbedba6c361fea4f6d852821b284de41b18a011c85f67f882ea949ad18af8627f16d136eff42225766928
- SSDEEP 24576:aIQbD1BNlg7CTHBTCj05vorkPHN00Kgc33DeyvQL0Ff:YbD1BNwCTHBTCo5Q4PHS0/c3HO0Ff
- TLSH
  T1AA86618FBA4548A7C43FA33185AF0E6CDBB65D10A2E1835A409471248E7B3CDBF356D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Medusa/Data/bin/shellext.dll.mui
- Size 3KB
- SHA256 965d0e8e10aa6b54143ee53fdddab4d741c6d98d25d98178b952ce59525fc38f
- MD5 efc6c0bdcfcc4855ffaa417c21dd974c
- SHA1 09ba48ecfb36e41e5c6cd15a26f2107b5a306e4e
- SHA512 2a69e0bf20ab668397a6d1bdeb4dff03156360eff00dec42b898e03174509de8ac05adc384db129a17e05d6d3f84b4fa82fc93331b37dce83ffd8527138c6456
- TLSH
  T1AC71A10F9BBB4117F0A65B304BE745C227BD7E137392A56FCF0A142924641386A90FF2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6
- Target
  Medusa/Data/lib/EppManifest.dll.mui
- Size 3KB
- SHA256 7e1ebbefca708f911b9ec83a7a5b5e0d4137950a2ead5eaa8040e91a4395dc6d
- MD5 5fd4c80b53fa105d4ab070b6ab32278c
- SHA1 21eeb2f26a52e84eaaa4a6af9fd5b7051991628d
- SHA512 5deb775c514eaa1988e2d73bcfb8ad4ecdb40d20bd9eb956f73073b5df5fab27d545b6917f2663a50fd737df1acb11fdeb88f5f3c201967ba473c74ca646cde2
- TLSH
  T19F51390A9BB74117F0AA4B318BE745D62BFD7D137692A16FCF05201824A41295AE0FF3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7
- Target
  Medusa/Data/lib/MpAsDesc.dll.mui
- Size 57KB
- SHA256 5ce03545cd628d5b3b2756690449a4895b38233db328c42b7c590d410acd058b
- MD5 ebf57b30f3ebf0a190e52d23d404eb9d
- SHA1 803f3875e5ce9de8ff0129956a4e1693f8063bfa
- SHA512 0c42457780e32e9103bbe6cb2958e5cf5729aa2201d6e3015f0126baccd914264e95abf1f99542bbf38919d7fce2c25cfc54c641705f9743b262b61d2763caf8
- SSDEEP 384:Y3PMBRJYGHUp8wtVM8xrYXoHEPbl0af619kSG9yvJGNV8GzWE0:QbrOh0
- TLSH
  T18843F44FEABCE564F899F2720F6348E7106AB710271895CEA68F7C68602C63573356C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Medusa/Data/lib/MpEvMsg.dll.mui
- Size 47KB
- SHA256 337d7db6d5b025f7ef9cd4b3451f70e03367b9bcf2e5cd27f79112b56c881f93
- MD5 c897fcc7aa7076cd5811eaa0bec573c4
- SHA1 da6279b19c3ceefce26f1d28d09bfbda4e18a54d
- SHA512 3a246260a0a2e476efa805bd88472cc2b3338888e6533aada62ca08b1cf20df0ef60b74d73ce09913e4be8fcc9cbab6e94cb4d7d87264342d662f1c659b7dd00
- SSDEEP 192:FpDOkKFqqXbRFp/opQ+yARMFTw0Thx49laYZUBmynWeIxbNxXed2DB4iW+orDgFg:FpDtGbvhMhmMUBmKYDp0ra/rkfzkWc+
- TLSH
  T15F23AE0FA9BFD290E854D3711B6284E201297B9063B9D4C9978FFD7870985363B247EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Medusa/Data/lib/mshtmI
- Size 22.4MB
- SHA256 6b3eb32ff53bc3dc5e315ee9d427194ad33e41414fca50217e99e22f179b906d
- MD5 bf26ced3e757f560ef66151e475dd7d8
- SHA1 a4598bdca53710bc33550756ba494039cdefeda7
- SHA512 2b3c96784770b4beca0c080c076d3ec19cc1e73cd1b8cc0add36c8ed73826f8ee07e5ac5564a54083e76716ce5d3ea6f75ef2b95734a0ec5a80013640a0edcfc
- SSDEEP 393216:CoQwzklNkFNV9bUR53WGm2UQ87gDmPSsRNy:0wwsR
- TLSH
  T1DA377C1A66E88184C4B6E038D65B4A4BFAB17C21233157CF01B177795F337E66A3E7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Medusa/Data/lib/sfcdix
- Size 10.0MB
- SHA256 7abc2b2b8544cd3aa9cd03e0f19fa1447c6636c3712ae4cfc5e02db3105b520e
- MD5 9eddcdce6dfe6812b282616a7de33699
- SHA1 4b30e7882dfd2643c639d6f74035a22cd28d6471
- SHA512 02ffb8a17b27754f1cbd06a814a6cd377ecec25392e08a2ec72bb6c679e922ff232d240d858ff2ff319e7f52787af5d919ab0f26cd26d2844033e2bcc5a4edfc
- SSDEEP 49152:Ml7PcvfsbYs9lYyaieo78r4y6OVof5p4F92I2q2q2q2U2d2E25Y32j:V+Xazo7U6OVI5pkL
- TLSH
  T1BBB6A30572E8C247FEB27A3059B752BD492E7CD19A35C39E12437BCD9F31A908963722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Medusa/Data/loghandler/OfficeMacro/al-khaser.docm
- Size 17KB
- SHA256 d8ed37df4b489234d714bdca20293548970a552c70373861854790b2f7f674c8
- MD5 349de3cb8e2705f2e504c57eaa34a243
- SHA1 2737dcf53b42246790fe327f8a961c3f61664024
- SHA512 7184cc7dcf110606e952a93a46752e5a5542f5339669ed150263064103d3cf2c85e221020c62e5f62be3513da81668bd37389924bed8e2640d657290749262b8
- SSDEEP 384:Xsz8NDw0sEmTJBgn0i13LSPHqfQsgnsX6Ujnw+3XeJ3F:XD/sEm1sv132PHqsH+3XyF
- TLSH
  T15882AE7CD15DE838DA334AFCD15E05F2F6548003F252A92779AAD3C88958A9F4739B4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Medusa/Data/loghandler/Tools/ATAIdentifyDump/mshtmI
- Size 22.4MB
- SHA256 6b3eb32ff53bc3dc5e315ee9d427194ad33e41414fca50217e99e22f179b906d
- MD5 bf26ced3e757f560ef66151e475dd7d8
- SHA1 a4598bdca53710bc33550756ba494039cdefeda7
- SHA512 2b3c96784770b4beca0c080c076d3ec19cc1e73cd1b8cc0add36c8ed73826f8ee07e5ac5564a54083e76716ce5d3ea6f75ef2b95734a0ec5a80013640a0edcfc
- SSDEEP 393216:CoQwzklNkFNV9bUR53WGm2UQ87gDmPSsRNy:0wwsR
- TLSH
  T1DA377C1A66E88184C4B6E038D65B4A4BFAB17C21233157CF01B177795F337E66A3E7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Medusa/Data/loghandler/Tools/StructDumpCodegen/struct_dump_codegen.linq
- Size 5KB
- SHA256 4d0bd6919ce40c3993649b7e055127744669dfb218233ebada45cb50a99778dd
- MD5 08a9e66154556c7d963b22a2271d32ea
- SHA1 abac92a914351c9d4c1aaab9a1f00f458dc35ae4
- SHA512 b77a3164f56d126457dc3bf84b6394e1c0f20e65fc4200364cd8d67a0f47173c89349ce8d762c01117fdeb429f604f5c6120f519d8ea7a882ce0837d2af9fa77
- SSDEEP 96:QrytC1ytgyt5ytkytCytBk7la9FNDXoUax8ZZeElxhlZekvtnSIxt+dftCTe1EFO:QaCQVMBLBk7la9FlXdCgDZhoIxt+dtwG
- TLSH
  T1FAC1DF51FAFCC1DCD4A2901C14B1F0EA629DD53F086C9CB2FEEA0128F45564D81BBE66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  Medusa/Data/loghandler/Tools/mshtmI
- Size 22.4MB
- SHA256 6b3eb32ff53bc3dc5e315ee9d427194ad33e41414fca50217e99e22f179b906d
- MD5 bf26ced3e757f560ef66151e475dd7d8
- SHA1 a4598bdca53710bc33550756ba494039cdefeda7
- SHA512 2b3c96784770b4beca0c080c076d3ec19cc1e73cd1b8cc0add36c8ed73826f8ee07e5ac5564a54083e76716ce5d3ea6f75ef2b95734a0ec5a80013640a0edcfc
- SSDEEP 393216:CoQwzklNkFNV9bUR53WGm2UQ87gDmPSsRNy:0wwsR
- TLSH
  T1DA377C1A66E88184C4B6E038D65B4A4BFAB17C21233157CF01B177795F337E66A3E7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Medusa/Data/mshtmI
- Size 22.4MB
- SHA256 6b3eb32ff53bc3dc5e315ee9d427194ad33e41414fca50217e99e22f179b906d
- MD5 bf26ced3e757f560ef66151e475dd7d8
- SHA1 a4598bdca53710bc33550756ba494039cdefeda7
- SHA512 2b3c96784770b4beca0c080c076d3ec19cc1e73cd1b8cc0add36c8ed73826f8ee07e5ac5564a54083e76716ce5d3ea6f75ef2b95734a0ec5a80013640a0edcfc
- SSDEEP 393216:CoQwzklNkFNV9bUR53WGm2UQ87gDmPSsRNy:0wwsR
- TLSH
  T1DA377C1A66E88184C4B6E038D65B4A4BFAB17C21233157CF01B177795F337E66A3E7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Medusa/Data/mstscax
- Size 8.0MB
- SHA256 9430965c7c980faa356025e139f983624fa67565d4c5b2cc776f698117325b60
- MD5 96bd36ed3d5a04e8a9f44fd38b0bfa91
- SHA1 6ad76494cad227633b01f52ed5bae6e28e2acb1d
- SHA512 d2f4caf5a2c78c75ee267574775c996490b4f2c08e790075d6ab9e1dc07aa4e2f7153d4a8df6297f3928bf213b912de058606fe4b582ef400f1b40355e4ed09d
- SSDEEP 196608:frDIdWVp5K3s3V3w7t0K9TkHge7nnB1IhTKMa4JVl8tkxQDdRfKez2mW5iIAa2tG:frDIdWVp5K3Q3w7t0K9TkHge7nnB1IhH
- TLSH
  T1A1865C18A3FC2054D4BAD23886454A1AFEB17C1C3F739ADB4066812A7F77ED15A38F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral20
- Target
  Medusa/Data/ncuvid
- Size 19.0MB
- SHA256 21ef8438a1f4b3f645edd20aec1989943d32d72f35ad9d983c548c5c71b480d3
- MD5 bb82a77952eace70b6de3267aa573a9e
- SHA1 ffca4b1fc6663af6b2c57fd06f769b56bde719b2
- SHA512 131d177fd56575e2e29c0e65a724798a4d91ce5bfddcac9ba162a46d3ef2cf7d339057879f38e99e880f53011932f539a6782ca1121b6f2ce03d8c5bfb62270e
- SSDEEP 98304:24KpWnNrEhBRGgyDcOEl/QCAWYGlKMifJs3asrbcg4m2oY:2snNYBnysl/Y+KMea2oY
- TLSH
  T1D417E9C9B496DA07C50A463C94EBDBF4EA39394306258BCB67C016FB3DA7BF65931021
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Medusa/Data/prm0019
- Size 8.2MB
- SHA256 706b25874604f74f20f1edac93769a08589114ed87cacec8f2d7b2ca8ab32f67
- MD5 95e3c7c5af6b29749ef27d5f6d49c67a
- SHA1 51ec3dff0cccb502e4f2c278d284f094548bfae6
- SHA512 6b14d302f888cfa2d78567f89896dd1c5a82197ec804af6c8e86c659942bc9964e3f45f0cbabedc516ec215c49423a4c1db66bbfcb780656cf418334f67c4f0d
- SSDEEP 49152:zwDbIRcWGudJcDomboWWCsFA5O8WIjFsQt1/TL97hQjSHDP7iDHVEC5WHzeejZMM:zinfm3DvYYisVQBP
- TLSH
  T1AF9609CEABEB882BFE1D8C37A6C54F65B200B492C8E30D554168F660DD766DC44379B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Medusa/Data/set/BouncyCastle.Crypto
- Size 3.2MB
- SHA256 66a0e168dc2ac6ed42aa3da02a536667eaf48a40ad2ecd1dd7925b4c32cb587f
- MD5 6d3dde48f04939531b2d1a840145c594
- SHA1 d1af96abb2b486b1aff96075ec2a5c9972dabc54
- SHA512 d3e2f26f224800d762f74afb1f2990aae0c4ab7c30af5d6f1b174941f9b0f11bc7291cbb2f0548f61b692e68b90df582da693bdde7f63de377f3b68c60b2dbb1
- SSDEEP 49152:brUzYM2ldj79XX5PNpbQjEsIFRKaUK+HBkHoOAC:3UzYM2lTXJPNqNC
- TLSH
  T1CEF55C1677F85E27D26EC7B7C5F05001A7F2FC6AB363DB07668066AA1C12B206D413A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Medusa/Data/set/DwmSce
- Size 2.3MB
- SHA256 f951aca80547f22ecb49187ec5ab302d2ad82b74c0fc30d37eb67046258464e7
- MD5 2e9830015b45cf02fcc67fe4c2b00aae
- SHA1 0cf730f1cd02c573cfa083cf748a5493f5c5820a
- SHA512 ff467d558b53bafacc070a977ed75695b4788fa229ece4505374183d605e35b46a62500154b14278b8d87b4356ff155e469e1509a741af5beb63d2d1f9b1cf52
- SSDEEP 49152:rLCMQAuPriD9BOXVgRzu44tgj2nLaEVCv7u/JA8:Sz1lgpEVG7WA8
- TLSH
  T1B1B5180A67984176C5AED3BACCD78B26F33274100BF687D30398211E2DBB7D45D7A662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Medusa/Data/set/DwmSceneI
- Size 2.3MB
- SHA256 f951aca80547f22ecb49187ec5ab302d2ad82b74c0fc30d37eb67046258464e7
- MD5 2e9830015b45cf02fcc67fe4c2b00aae
- SHA1 0cf730f1cd02c573cfa083cf748a5493f5c5820a
- SHA512 ff467d558b53bafacc070a977ed75695b4788fa229ece4505374183d605e35b46a62500154b14278b8d87b4356ff155e469e1509a741af5beb63d2d1f9b1cf52
- SSDEEP 49152:rLCMQAuPriD9BOXVgRzu44tgj2nLaEVCv7u/JA8:Sz1lgpEVG7WA8
- TLSH
  T1B1B5180A67984176C5AED3BACCD78B26F33274100BF687D30398211E2DBB7D45D7A662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Medusa/Data/set/DwmSceneIetic
- Size 2.3MB
- SHA256 f951aca80547f22ecb49187ec5ab302d2ad82b74c0fc30d37eb67046258464e7
- MD5 2e9830015b45cf02fcc67fe4c2b00aae
- SHA1 0cf730f1cd02c573cfa083cf748a5493f5c5820a
- SHA512 ff467d558b53bafacc070a977ed75695b4788fa229ece4505374183d605e35b46a62500154b14278b8d87b4356ff155e469e1509a741af5beb63d2d1f9b1cf52
- SSDEEP 49152:rLCMQAuPriD9BOXVgRzu44tgj2nLaEVCv7u/JA8:Sz1lgpEVG7WA8
- TLSH
  T1B1B5180A67984176C5AED3BACCD78B26F33274100BF687D30398211E2DBB7D45D7A662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Medusa/Data/set/coreclr
- Size 4.8MB
- SHA256 af9d546e1c2d831ff0fcbcf69571f149e0bb80b4a105ee16666432eedb814a8e
- MD5 bf9d7eecb45103efc84b78487f80417a
- SHA1 30237a4a849ca5946d1a2359111fea56a024f97f
- SHA512 959fd97b7d888ab4a8c6cd7c23172c18e3fc6cdce22289f21dcaba94ad79df7fb88048ea77a08edf3f1e159218b945b07b7351f6b1943d0bf984765e3e4e6d61
- SSDEEP 49152:8HibBIdzHLLmcuWXjKV84FHSrXmj2ZBw2vv5SH32C+lnmvNca55dD80hsneGjpiL:c5HLLmcuWX+BFqYmEO8VT5lpLQWjz
- TLSH
  T1B2369E56B2ED00A8D4BBC078C9D71A17FAB178491738EBEF02654A651F23BE16B3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Medusa/Data/set/dwmcore
- Size 2.7MB
- SHA256 1a86a09ec903e052c0deef727c70004ce474b0f5bd95c2a47ba8bb78a0cc0345
- MD5 7016e120071fca6e20bb5b82987b4dec
- SHA1 4f443ab38977bb371b5dad63e6d53fd7b7d196d6
- SHA512 a64251a0b4add6338a996201bc3a0e51e2451e0391d4aefdd59510bc5eb4a4dcc8dcd9bd94c1106828a5f0f267605b0ca0d6ed046822e17408fd87094ed7c5fe
- SSDEEP 24576:FM2LkSg73u36ifn/NYtG1rhLnDeQq2SsNEJY/VVEEURHYVScnzIhZ06cI5fwZVjK:eMgg6Y/NuGl2JmVUR4VjzcvfwZV7m
- TLSH
  T14ED5391736E880B6D57ED33898DB8B1AF7B1B81117B28ACB225412684FB37D05E7B354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Medusa/Data/set/dwmcorei
- Size 2.7MB
- SHA256 1a86a09ec903e052c0deef727c70004ce474b0f5bd95c2a47ba8bb78a0cc0345
- MD5 7016e120071fca6e20bb5b82987b4dec
- SHA1 4f443ab38977bb371b5dad63e6d53fd7b7d196d6
- SHA512 a64251a0b4add6338a996201bc3a0e51e2451e0391d4aefdd59510bc5eb4a4dcc8dcd9bd94c1106828a5f0f267605b0ca0d6ed046822e17408fd87094ed7c5fe
- SSDEEP 24576:FM2LkSg73u36ifn/NYtG1rhLnDeQq2SsNEJY/VVEEURHYVScnzIhZ06cI5fwZVjK:eMgg6Y/NuGl2JmVUR4VjzcvfwZV7m
- TLSH
  T14ED5391736E880B6D57ED33898DB8B1AF7B1B81117B28ACB225412684FB37D05E7B354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32