Files
MBCProject-mbc-markdown/micro-behaviors/data/check-string.md
T
Ryan Xu d423b5a5fa Adding CAPE mappings to detection section (#132)
* Making spacing between sections consistent

* Adding cape mappings
2023-12-05 14:19:50 -05:00

1.2 KiB

ID C0019
Objective(s) Data
Related ATT&CK Techniques None
Version 2.0
Created 14 August 2020
Last Modified 13 September 2023

Check String

Malware may check a string for some characteristics, such as being ASCII content, credit card number, or length.

Use in Malware

Name Date Method Description
Locky Bart 2017 -- Locky Bart references Base64 strings. [1]

Detection

Tool: capa Mapping APIs
reference Base64 string Check String (C0019) --
parse credit card information Check String (C0019) --

References

[1] capa v4.0, analyzed at MITRE on 10/12/2022