General
- Target Preuve De Violation.zip
- Size 200.7MB
- Sample260729-vm262sbr7z
- SHA256 6a8e872243722ebaf085102ae1178d346a8cf46e2efcfb794512bdc825cbb176
Score
7/10
Malware Config
Targets
-
- Target Preuve De Violation.docx .exe
- Size 2.2MB
- SHA256 f4c19efa935b3323931c602b9ed6546492824f1b8256e8a8dd1e3c1ad4caced9
Score3/10 -
- Target msvcr100.dll
- Size 50.0MB
- SHA256 7cdb5ffb653afd76539ca43fb2384b290451ce9c3f2c7e9d3a3e67cbcd4f17cd
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1