CAPECattack pattern

CAPEC-558 Replace Trusted Executable

High Official page ↗

Abstraction: Detailed
Status: Stable
Likelihood of attack: Low
Typical severity: High
CAPEC version: 3.9

Description

An adversary exploits weaknesses in privilege management or access control to replace a trusted executable with a malicious version and enable the execution of malware when that trusted executable is called.

Att&ck technique · MITRE ATT&CK (2)

T1505.005 Terminal Services DLL sub-technique
T1546.008 Accessibility Features sub-technique

Child of · CAPEC (1)

CAPEC-542 Targeted Malware attack pattern

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

Referenced by CWE · attack pattern (1)

CWE-284 Improper Access Control weakness