whirlpool: attack and mbc

mandiant · Jan 19, 2023 · c9183fc · c9183fc
1 parent 62274b4
commit c9183fc
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/nursery/hash-data-using-whirlpool.yml b/nursery/hash-data-using-whirlpool.yml
@@ -5,6 +5,10 @@ rule:
     authors:
       - [email protected]
     scope: function
+    att&ck:
+      - Defense Evasion::Obfuscated Files or Information [T1027]
+    mbc:
+      - Defense Evasion::Obfuscated Files or Information::Encryption-Standard Algorithm [E1027.m05]
     references:
       - https://github.com/jzelinskie/whirlpool/blob/master/const.go
     #examples: