Skip to content

Hide Navigation Hide TOC

Password Protected ZIP File Opened (Suspicious Filenames) (54f0434b-726f-48a1-b2aa-067df14516e4)

Detects the extraction of password protected ZIP archives with suspicious file names. See the filename variable for more details on which file has been opened.

Cluster A Galaxy A Cluster B Galaxy B Level
Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) Attack Pattern Password Protected ZIP File Opened (Suspicious Filenames) (54f0434b-726f-48a1-b2aa-067df14516e4) Sigma-Rules 1
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern Password Protected ZIP File Opened (Suspicious Filenames) (54f0434b-726f-48a1-b2aa-067df14516e4) Sigma-Rules 1
Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern Password Protected ZIP File Opened (Suspicious Filenames) (54f0434b-726f-48a1-b2aa-067df14516e4) Sigma-Rules 1