mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00

Files

T

- Updating capa detection in behaviors
- Newsletter
- Conti malware
- pafish faq

2023-09-20 15:57:32 -04:00

Data Flow Analysis Evasion

Malware code evades data flow analysis (also known as information flow analysis and taint-tracking).

Methods

Name	ID	Description
Control Dependence	B0045.001	Data is propagated via an if-then-else clause instead of direct assignment.[1]
Implicit Flows	B0045.002	Data is propagated via semantic relationships, for example one variable not changing its state could imply the state of another variable.[1]
Arbitrary Memory Corruption	B0045.003	Data is propagated by corrupting memory, for example overwriting a region of stack space where a file pointer is held.[1]