Hide Navigation Hide TOC

Potential DLL Sideloading Of KeyScramblerIE.DLL Via KeyScrambler.EXE (d2451be2-b582-4e15-8701-4196ac180260)

Detects potential DLL side loading of "KeyScramblerIE.dll" by "KeyScrambler.exe". Various threat actors and malware have been found side loading a masqueraded "KeyScramblerIE.dll" through "KeyScrambler.exe".

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
DLL Side-Loading - T1574.002 (e64c62cf-9cd7-4a14-94ec-cdaac43ab44b)	Attack Pattern	Potential DLL Sideloading Of KeyScramblerIE.DLL Via KeyScrambler.EXE (d2451be2-b582-4e15-8701-4196ac180260)	Sigma-Rules	1
DLL Search Order Hijacking - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	Potential DLL Sideloading Of KeyScramblerIE.DLL Via KeyScrambler.EXE (d2451be2-b582-4e15-8701-4196ac180260)	Sigma-Rules	1
DLL Side-Loading - T1574.002 (e64c62cf-9cd7-4a14-94ec-cdaac43ab44b)	Attack Pattern	Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	2
Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	DLL Search Order Hijacking - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	2