From aeaded3b083ddaf23398b64f38282b5691054b91 Mon Sep 17 00:00:00 2001 From: CircleCI Atomic Red Team GUID generator Date: Wed, 2 Feb 2022 16:27:51 +0000 Subject: [PATCH] Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] --- atomics/T1543.003/T1543.003.yaml | 1 + atomics/used_guids.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/atomics/T1543.003/T1543.003.yaml b/atomics/T1543.003/T1543.003.yaml index 338b07ac..5e1f6018 100644 --- a/atomics/T1543.003/T1543.003.yaml +++ b/atomics/T1543.003/T1543.003.yaml @@ -92,6 +92,7 @@ atomic_tests: try {(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete()} catch {} - name: TinyTurla backdoor service w64time + auto_generated_guid: ef0581fd-528e-4662-87bc-4c2affb86940 description: | It's running Dll as service to emulate the tine turla backdoor diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 7aff52be..f27565b5 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -850,3 +850,4 @@ c510d25b-1667-467d-8331-a56d3e9bc4ff deecd55f-afe0-4a62-9fba-4d1ba2deb321 d239772b-88e2-4a2e-8473-897503401bcc eb8da98a-2e16-4551-b3dd-83de49baa14c +ef0581fd-528e-4662-87bc-4c2affb86940