diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index d7821407..f3fe73e8 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -18976,7 +18976,7 @@ privilege-escalation: time: description: Daily scheduled task execution time type: string - default: 27900 + default: '07:45' executor: command: | reg add HKCU\SOFTWARE\ATOMIC-T1053.005 /v test /t REG_SZ /d cGluZyAxMjcuMC4wLjE= /f @@ -51876,7 +51876,7 @@ persistence: time: description: Daily scheduled task execution time type: string - default: 27900 + default: '07:45' executor: command: | reg add HKCU\SOFTWARE\ATOMIC-T1053.005 /v test /t REG_SZ /d cGluZyAxMjcuMC4wLjE= /f @@ -69172,7 +69172,7 @@ execution: time: description: Daily scheduled task execution time type: string - default: 27900 + default: '07:45' executor: command: | reg add HKCU\SOFTWARE\ATOMIC-T1053.005 /v test /t REG_SZ /d cGluZyAxMjcuMC4wLjE= /f diff --git a/atomics/T1053.005/T1053.005.md b/atomics/T1053.005/T1053.005.md index 20ffb6d1..4db1888e 100644 --- a/atomics/T1053.005/T1053.005.md +++ b/atomics/T1053.005/T1053.005.md @@ -285,7 +285,7 @@ This is a persistence mechanism recently seen in use by Qakbot. #### Inputs: | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| time | Daily scheduled task execution time | string | 27900| +| time | Daily scheduled task execution time | string | 07:45| #### Attack Commands: Run with `command_prompt`!