ElevatorMalware
Last reported 7 months ago, by Zscaler ThreatLabz1 report
ATT&CK techniques
6 of 21 · each with the sentence it comes from- T1010Application Window Discovery
“T1010”
- T1027Obfuscated Files or Information
“T1027”
- T1041Exfiltration Over C2 Channel
“T1041”
- T1053.005Scheduled Task
“T1053.005”
- T1055Process Injection
“T1055”
- T1056Input Capture
“Input Capture: Keylogging”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Technical Analysis of SnappyClient“c: Elevator CLSID.”
Indicators in its reports
named in the reports above- 61e103db36ebb577…e87e2fc5ee99in 1 report
- 23e2a0c25c95eebe…a89c3d49812ein 1 report
- 00019221fb0b61b7…6eaf92dbfe2fin 1 report
- 6e360fca0b1e3021…40557cd517d7in 1 report
- 64a2609d6707a2eb…bc8aa6bec2c8in 1 report
- 151.242.122[.]227in 1 report
- 179.43.167[.]210in 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.