diff --git a/atomics/T1560.001/T1560.001.yaml b/atomics/T1560.001/T1560.001.yaml index 748d42e6..624a52d9 100644 --- a/atomics/T1560.001/T1560.001.yaml +++ b/atomics/T1560.001/T1560.001.yaml @@ -277,6 +277,7 @@ atomic_tests: cleanup_command: | rm -Rf #{test_folder} - name: 'Encrypts collected data with AES-256 and Base64' + auto_generated_guid: a743e3a6-e8b2-4a30-abe7-ca85d201b5d3 description: |- An adversary may compress all the collected data, encrypt and send them to a C2 server using base64 encoding. This atomic test tries to emulate the behaviour of the FLEXIROOT backdoor to archive the collected data. FLEXIROOT typically utilizes AES encryption and base64 encoding to transfer the encrypted data to the C2 server. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index bb66ad07..95d7e836 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1331,3 +1331,4 @@ edddff85-fee0-499d-9501-7d4d2892e79b 6d99f93c-da56-49e3-b195-163090ace4f6 8a0b1579-5a36-483a-9cde-0236983e1665 0b2eadeb-4a64-4449-9d43-3d999f4a317b +a743e3a6-e8b2-4a30-abe7-ca85d201b5d3