mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Ryan Xu
009ae77217
* E/f updates (#143) * E/F Update, Update Install Cert ID * Small fixes * Update common objects link (#142) * Update README.md * Update 09152023.md * Update README.md * Update 12182023.md * Adding descriptions to micro-behaviors * Fixing dead links * V3.1 updates (#144) * minor fixes for v3.1 * correct id --------- Co-authored-by: Desiree Beck <dbeck@mitre.org>
1.9 KiB
1.9 KiB
| ID | C0050 |
| Objective(s) | File System |
| Related ATT&CK Techniques | None |
| Version | 2.1 |
| Created | 4 December 2020 |
| Last Modified | 6 February 2024 |
Set File Attributes
Malware sets file attributes.
Use in Malware
| Name | Date | Method | Description |
|---|---|---|---|
| DNSChanger | 2011 | -- | DNSChanger sets file attributes. [1] |
| Gamut | 2014 | -- | Gamut sets file attributes. [1] |
| Hupigon | 2013 | -- | Hupigon sets file attributes. [1] |
| Kovter | 2016 | -- | Kovter sets file attributes. [1] |
| Redhip | 2011 | -- | Redhip sets file attributes. [1] |
| UP007 | 2016 | -- | UP007 sets file attributes. [1] |
Detection
| Tool: capa | Mapping | APIs |
|---|---|---|
| change file permission on Linux | Set File Attributes (C0050) | chown, fchown, lchown, fchownat |
| set file attributes | Set File Attributes (C0050) | kernel32.SetFileAttributes, ZwSetInformationFile, NtSetInformationFile, System.IO.File::SetAttributes, System.IO.File::SetCreationTime, System.IO.File::SetCreationTimeUtc, System.IO.File::SetLastAccessTime, System.IO.File::SetLastAccessTimeUtc, System.IO.File::SetLastWriteTime, System.IO.File::SetLastWriteTimeUtc |
References
[1] capa v4.0, analyzed at MITRE on 10/12/2022