General
- Target testerr.rar
- Size 15.0MB
- Sample260826-w23a2aeh34
- SHA256 ef752e97aed0b8edbc5db8a7b54e8560d6784e146f04a492e136e84b0fba6c02
Score
8/10
Malware Config
Targets
-
- Target testerr.rar
- Size 15.0MB
- SHA256 ef752e97aed0b8edbc5db8a7b54e8560d6784e146f04a492e136e84b0fba6c02
Score8/10-
Downloads MZ/PE file
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target testerr/winrar-x64-723 (1).exe
- Size 3.7MB
- SHA256 f435b24d4c2c5342c4f7c0143ef358f0f425b7b8a0972dd34d9dcf94789e9c4d
Score5/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
3Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1