Skip to content

Hide Navigation Hide TOC

Potential DCOM InternetExplorer.Application DLL Hijack (2f7979ae-f82b-45af-ac1d-2b10e93b0baa)

Detects potential DLL hijack of "iertutil.dll" found in the DCOM InternetExplorer.Application Class over the network

Cluster A Galaxy A Cluster B Galaxy B Level
SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Potential DCOM InternetExplorer.Application DLL Hijack (2f7979ae-f82b-45af-ac1d-2b10e93b0baa) Sigma-Rules 1
Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd) Attack Pattern Potential DCOM InternetExplorer.Application DLL Hijack (2f7979ae-f82b-45af-ac1d-2b10e93b0baa) Sigma-Rules 1
SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2
Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2