admin/MBCProject-mbc-markdown
1
0
Fork 0
mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Typo fixes in xample-malware (#92)

Browse Source
This commit is contained in:
Ryan Xu
2023-04-03 15:09:07 -04:00
committed by GitHub
parent 6509b3dedb
commit 337d99e890
4 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
micro-behaviors/communication/interprocess-communication.md
+2 -1
View File
@@ -43,7 +43,8 @@ The Interprocess Communication micro-behavior focuses on interprocess communicat
|Name|Date|Method|Description|
|---|---|---|---|
|[**Hupigon**](../xample-malware/hupigon.md)|2013|C0003.001, C0003.004|Please see the Hupigon malware page for details. [[1]](#1)|
|[**Hupigon**](../xample-malware/hupigon.md)|2013|C0003.001|Hupigon creates two anonymous pipes. [[1]](#1)|
|[**Hupigon**](../xample-malware/hupigon.md)|2013|C0003.004|Hupigon writes pipes. [[1]](#1)|
|[**Poison Ivy**](../xample-malware/poison-ivy.md)|2005|C0003.004|Poison Ivy writes pipes. [[1]](#1)|
## References
xample-malware/cozycar.md
-1
View File
@@ -35,7 +35,6 @@ See ATT&CK: [CozyCar - Techniques Used](https://attack.mitre.org/software/S0046/
|Name|Use|
|---|---|
<<<<<<< HEAD
|[Command and Control::Ingress Tool Transfer (E1105)](../command-and-control/ingress-tool-transfer.md)|CozyCar requests a file using SSL to a C2 domain. [[1]](#1)|
|[Defense Evasion::Self Deletion (F0007)](../defense-evasion/self-deletion.md)|CozyCar has a dll file that serves as a cleanup mechanism for its dropped binary. [[1]](#1)|
|[Command and Control::C2 Communication (B0030)](../command-and-control/c2-communication.md)|CozyCar communicates with a C2 server. [[1]](#1)|
xample-malware/hupigon.md
+4 -4
View File
@@ -74,13 +74,13 @@ A family of backdoors.
|Name|Use|
|---|---|
|[Impact::Remote Access (B0022)](../impact/remote-access.md)|The malware acts as a backdoor. [[1]](#1)|
|[Anti-Behavioral Analysis::Conditional Execution::Runs as Service (B0025.007)](../execution/conditional-execution.md)|Hupigon runs as a service. [[3]](#3)|
|[Execution::Conditional Execution::Runs as Service (B0025.007)](../execution/conditional-execution.md)|Hupigon runs as a service. [[3]](#3)|
|[Anti-Behavioral Analysis::Debugger Detection::Anti-debugging Instructions (B0001.034)](../anti-behavioral-analysis/debugger-detection.md)|Hupigon executes anti-debugging instructions. [[3]](#3)|
|[Anti-Behavioral Analysis::Debugger Detection::Software Breakpoints (B0001.025)](../anti-behavioral-analysis/debugger-detection.md)|Hupigon checks for software breakpoints. [[3]](#3)|
|[Anti-Behavioral Analysis::Debugger Detection::Timing/Delay Check GetTickCount (B0001.032)](../anti-behavioral-analysis/debugger-detection.md)|Hupigon checks for a time delay via GetTickCount. [[3]](#3)|
|[Anti-Static Analysis::Disassembler Evasion::Argument Obfuscation (B0012.001)](../anti-static-analysis/disassembler-evasion.md)|Hupigon contains obfuscated stack strings. [[3]](#3)|
|[Micro-Behaviors::Command And Control::C2 Communication::Receive Data (B0030.002)](../command-and-control/c2-communication.md)|Hupigon receives data. [[3]](#3)|
|[Micro-Behaviors::Command And Control::C2 Communication::Send Data (B0030.001)](../command-and-control/c2-communication.md)|Hupigon sends data. [[3]](#3)|
|[Command And Control::C2 Communication::Receive Data (B0030.002)](../command-and-control/c2-communication.md)|Hupigon receives data. [[3]](#3)|
|[Command And Control::C2 Communication::Send Data (B0030.001)](../command-and-control/c2-communication.md)|Hupigon sends data. [[3]](#3)|
|[Micro-Behaviors::Communication::DNS Communication::Resolve (C0011.001)](../micro-behaviors/communication/dns-communication.md)|Hupigon resolves DNS. [[3]](#3)|
|[Micro-Behaviors::Communication::Interprocess Communication::Create Pipe (C0003.001)](../micro-behaviors/communication/interprocess-communication.md)|Hupigon creates two anonymous pipes. [[3]](#3)|
|[Micro-Behaviors::Communication::Interprocess Communication::Write Pipe (C0003.004)](../micro-behaviors/communication/interprocess-communication.md)|Hupigon writes pipes. [[3]](#3)|
@@ -88,7 +88,7 @@ A family of backdoors.
|[Micro-Behaviors::Cryptography::Encrypt Data::3DES (C0027.004)](../micro-behaviors/cryptography/encrypt-data.md)|Hupigon encrypts data using DES. [[3]](#3)|
|[Micro-Behaviors::Data::Compression Library (C0060)](../micro-behaviors/data/compression-library.md)|Hupigon linked against ZLIB. [[3]](#3)|
|[Micro-Behaviors::Data::Encode Data::XOR (C0026.002)](../micro-behaviors/data/encode-data.md)|Hupigon encodes data using XOR. [[3]](#3)|
|[Micro-Behaviors::Discovery::Code Discovery::Enumerate PE Sections (B0046.001)](../discovery/code-discovery.md)|Hupigon enumerates PE sections. [[3]](#3)|
|[Discovery::Code Discovery::Enumerate PE Sections (B0046.001)](../discovery/code-discovery.md)|Hupigon enumerates PE sections. [[3]](#3)|
|[Micro-Behaviors::File System::Copy File (C0045)](../micro-behaviors/file-system/copy-file.md)|Hupigon copies files. [[3]](#3)|
|[Micro-Behaviors::File System::Create Directory (C0046)](../micro-behaviors/file-system/create-directory.md)|Hupigon creates directories. [[3]](#3)|
|[Micro-Behaviors::File System::Delete Directory (C0048)](../micro-behaviors/file-system/delete-directory.md)|Hupigon deletes directories. [[3]](#3)|
xample-malware/locky-bart.md
+1 -1
View File
@@ -56,7 +56,7 @@ Locky Bart is ransomware. [[1]](#1)
|[Micro-Behaviors::Data::Check String (C0019)](../micro-behaviors/data/check-string.md)|Locky Bart references Base64 strings. [[2]](#2)|
|[Micro-Behaviors::Data::Checksum::CRC32 (C0032.001)](../micro-behaviors/data/checksum.md)|Locky Bart hashes data with CRC32. [[2]](#2)|
|[Micro-Behaviors::Data::Encode Data::XOR (C0026.002)](../micro-behaviors/data/encode-data.md)|Locky Bart encodes data using XOR. [[2]](#2)|
|[Micro-Behaviors::Discovery::Code Discovery::Enumerate PE Sections (B0046.001)](../discovery/code-discovery.md)|Locky Bart enumerates PE sections. [[2]](#2)|
|[Discovery::Code Discovery::Enumerate PE Sections (B0046.001)](../discovery/code-discovery.md)|Locky Bart enumerates PE sections. [[2]](#2)|
|[Micro-Behaviors::File System::Read File (C0051)](../micro-behaviors/file-system/read-file.md)|Locky Bart reads files on Windows. [[2]](#2)|
|[Micro-Behaviors::File System::Write File (C0052)](../micro-behaviors/file-system/writes-file.md)|Locky Bart writes files on Windows. [[2]](#2)|
|[Micro-Behaviors::Operating System::Registry::Set Registry Key (C0036.001)](../micro-behaviors/operating-system/registry.md)|Locky Bart sets registry values. [[2]](#2)|