General
- Target f88309449be9cc0425e054eed15f0c72.gif
- Size 464KB
- Sample260802-py9glstapf
- SHA256 1b2849337c4de560f915c5a8e07066b94f7adf39d614f4cb0f3bb5a0918e608e
Score
8/10
Malware Config
Targets
-
- Target f88309449be9cc0425e054eed15f0c72.gif
- Size 464KB
- SHA256 1b2849337c4de560f915c5a8e07066b94f7adf39d614f4cb0f3bb5a0918e608e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1