Skip to content

Hide Navigation Hide TOC

Potential DCOM InternetExplorer.Application DLL Hijack - Image Load (f354eba5-623b-450f-b073-0b5b2773b6aa)

Detects potential DLL hijack of "iertutil.dll" found in the DCOM InternetExplorer.Application Class

Cluster A Galaxy A Cluster B Galaxy B Level
Potential DCOM InternetExplorer.Application DLL Hijack - Image Load (f354eba5-623b-450f-b073-0b5b2773b6aa) Sigma-Rules SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern 1
Potential DCOM InternetExplorer.Application DLL Hijack - Image Load (f354eba5-623b-450f-b073-0b5b2773b6aa) Sigma-Rules Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd) Attack Pattern 1
SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2
Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2