Files
MBCProject-mbc-markdown/micro-behaviors/operating-system/console.md
T
2024-01-02 12:58:56 -05:00

1.3 KiB

ID C0033
Objective(s) Operating System
Related ATT&CK Techniques None
Version 2.1
Created 4 December 2020
Last Modified 5 December 2023

Console

Malware modifies the console.

Detection

Tool: capa Mapping APIs
set console window title Console (C0033) kernel32.SetConsoleTitle
manipulate console buffer Console (C0033) kernel32.SetConsoleCursorPosition, kernel32.ReadConsoleOutputCharacter, kernel32.WriteConsoleOutputCharacter, kernel32.WriteConsoleOutput, kernel32.WriteConsoleInput, kernel32.GetStdHandle, System.Console::Write, System.Console::WriteLine
Tool: CAPE Mapping APIs
bcdedit_command Console (C0033) ShellExecuteExW, NtCreateUserProcess, CreateProcessInternalW