General
- Target OpenFCC-Setup-Windows.exe
- Size 51.6MB
- Sample260809-n6j19axcnc
- SHA256 50bc1e3a1ac532af4ed54a0057960610e619ddfe0246233f134a5dd02d26b741
Score
7/10
Malware Config
Targets
-
- Target OpenFCC-Setup-Windows.exe
- Size 51.6MB
- SHA256 50bc1e3a1ac532af4ed54a0057960610e619ddfe0246233f134a5dd02d26b741
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
- Target entry.pyc
- Size 792B
- SHA256 bc826b5f04bd0407fecfa59fb19ac409f6c4733734bbcd09c24015c7ca07c7a5
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1