Forensia CTI Core

About

Adversaries may circumvent mechanisms designed to control privilege elevation to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.

Platforms: Linux, macOS, Windows, IaaS, Office Suite, Identity ProviderMITRE ATT&CK ↗

Used by actors

1 known groups

G1048 UNC3886

Software

1 malware/tools implement this

Raspberry Robin

Corpus indicators tagged with this technique

93 indicators in the corpus carry T1548.

Indicator	Type	Family	Sev	Src
cdb9d76093d0938f30d93bcce4f58b13b4b21c9188eea387c6d9ec6f4cb4aad4	hash	—	80	1
b82936f37648518425c7d3cf9e09eaffa41d7cdb3840f6a40287e3a108880f7b	sha256	—	80	2
12986838bf5c0b638edca3ac84c9e18f	hash	—	80	1
1da53ba0766c902a50ba40271b82e557	hash	—	80	1
20150ed3ac726c486d60b2be05ee2b74	hash	—	80	1
2c3e4e7219e33327915a4371051fe84f	hash	—	80	1
35f56e4a65b73a29e446b13eaff7eede	hash	—	80	1
7aa333c814c9ac618ae2fab66a6eddef	hash	—	80	1
debb2b7123e2b024ac6ae77c1aa59da2	hash	—	80	1
3874881233450ced72e743e3d9e6e3a7f0dc7ff9	hash	—	80	1
6c972d0f0f8c11c28272826add94f4e16e59dda1	hash	—	80	1
93da3d6daf2ab0433f19d04e28e4736458f5606a	hash	—	80	1
f6a4b3937dc373549e8f81eb29bfd2454e6e05a7	hash	—	80	1
01dc3e7e673b4f2682f29b19ecabf9a6ec9c3042c9b1cfb39dbdddf1dda680ab	hash	—	80	1
065c54893e4777d52be6b7bf30b832d5ffd9d96fd178642a5828a364c0e904a0	hash	—	80	1
1329be66458962dabfa20185c230439c57d32b90a20de791afdce9c15226fccb	hash	—	80	1
1ba73df60e12b3feb8b5574e65cfceb6910460ab7fae2cf5554769fafdad049e	hash	—	80	1
37facbbd0047c19f4efdea75ccb9e3ec793cb9b1d7846afa4fb8e900d6e9ed95	hash	—	80	1
5c02115b3f090551393cca3ce91fe837727d1c4586164c580759eb94387dba10	hash	—	80	1
5d19c07e3fb7ac4ff56a23f6e658d691f381442b1db2f8c5f345563c1cdc8998	hash	—	80	1
5ef76098be5ed1559b71ebd8d29cb32c1825991824051d8a641746e08bf9e1b3	hash	—	80	1
5eff99959683480d2280c931e433af836adf6a8b7a8489b1af17cddcf480cf63	hash	—	80	1
64944d2a6129631ff675c6dcfdd57a7e99a1e4dc41802cbd0eabcef3eb3e81c3	hash	—	80	1
660af53acdc505f333f6d4f4269cec740a5eb05e41a4c7926742606b18f22d33	hash	—	80	1
7170f3051cc9f4520e84f1ea3b599616d82be8e5087f19d8e2951fa6848924b3	hash	—	80	1
73c24bafba21f871cc9d28de92ee7e4b9f9c8ec337279c14c1facdb9feeb7af4	hash	—	80	1
746c4cd5fe3a8edd37d4b37b23af64b1086b5ea7c1ab0bcfd9c47e4e2e986518	hash	—	80	1
75b36769f0d36c05be74d41610d4af3f73397983ba746f8c569de6f23ee130e0	hash	—	80	1
79340e589a69f5dc204d4073341a07e98a588d0401d18f34991d14b71a475063	hash	—	80	1
7abc129482ccdf787b35b92b7d5b7ff2478e72fe516f4ceca0c02e23a1d34314	hash	—	80	1

Showing the top 30 by severity of 93.