mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
brightmt
6933d9e896
* Update snake.md Updated malware behaviors and descriptions. * Update snake.md Divided table to split out enhanced techniques * Update software-packing.md Added Snake * Update self-deletion.md Added Snake * Update system-information-discovery.md Added Snake * Update keylogging.md Added Snake * Update screen-capture.md * Update decode-data.md Added Snake * Update decrypt-data.md Added Snake * Update copy-file.md Added Snake * Update create-file.md Added Snake * Update delete-file.md * Update crypto-library.md Added Snake * Update crypto-library.md --------- Co-authored-by: Desiree Beck <dbeck@mitre.org>
| ID | OB0002 |
| Created | 1 August 2019 |
| Last Modified | 12 June 2023 |
Anti-Static Analysis
Behaviors and code characteristics that prevent or hinder static analysis of the malware. Simple static analysis identifies features such as embedded strings, header information, or file metadata. More involved static analysis involves the disassembly of the binary code.
- Call Graph Generation Evasion B0010
- Disassembler Evasion B0012
- Data Flow Analysis Evasion B0045
- Executable Code Obfuscation B0032
- Executable Code Optimization B0034
- Executable Code Virtualization B0008
- Obfuscated Files or Information E1027
- Software Packing F0001
References
[1] https://search.unprotect.it/category/sandbox-evasion/
[2] InDepthUnpacking, course content for teaching malware anti-analysis techniques and mitigations, with emphasis on packers. https://github.com/knowmalware/InDepthUnpacking