diff --git a/atomics/T1022/T1022.md b/atomics/T1022/T1022.md index 93f0b89a..8784d7f1 100644 --- a/atomics/T1022/T1022.md +++ b/atomics/T1022/T1022.md @@ -49,9 +49,9 @@ rar a -p"blue" hello.rar (VARIANT) #### Run it with `command_prompt`! ``` -mkdir ./tmp/victim-files -cd ./tmp/victim-files -echo "This file will be encrypted" > ./encrypted_file.txt +mkdir .\tmp\victim-files +cd .\tmp\victim-files +echo "This file will be encrypted" > .\encrypted_file.txt rar a -hp"blue" hello.rar dir ``` @@ -71,9 +71,9 @@ wzzip sample.zip -s"blueblue" *.txt (VARIANT) #### Run it with `command_prompt`! ``` path=%path%;"C:\Program Files (x86)\winzip" -mkdir ./tmp/victim-files -cd ./tmp/victim-files -echo "This file will be encrypted" > ./encrypted_file.txt +mkdir .\tmp\victim-files +cd .\tmp\victim-files +echo "This file will be encrypted" > .\encrypted_file.txt winzip32 -min -a -s"hello" archive.zip * dir ``` @@ -91,9 +91,9 @@ Note: Requires 7zip installation #### Run it with `command_prompt`! ``` -mkdir ./tmp/victim-files -cd ./tmp/victim-files -echo "This file will be encrypted" > ./encrypted_file.txt +mkdir .\tmp\victim-files +cd .\tmp\victim-files +echo "This file will be encrypted" > .\encrypted_file.txt 7z a archive.7z -pblue dir ``` diff --git a/atomics/index.yaml b/atomics/index.yaml index b6246769..a38ca643 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -23464,9 +23464,9 @@ exfiltration: name: command_prompt elevation_required: false command: | - mkdir ./tmp/victim-files - cd ./tmp/victim-files - echo "This file will be encrypted" > ./encrypted_file.txt + mkdir .\tmp\victim-files + cd .\tmp\victim-files + echo "This file will be encrypted" > .\encrypted_file.txt rar a -hp"blue" hello.rar dir - name: Compress Data and lock with password for Exfiltration with winzip @@ -23480,9 +23480,9 @@ exfiltration: elevation_required: false command: | path=%path%;"C:\Program Files (x86)\winzip" - mkdir ./tmp/victim-files - cd ./tmp/victim-files - echo "This file will be encrypted" > ./encrypted_file.txt + mkdir .\tmp\victim-files + cd .\tmp\victim-files + echo "This file will be encrypted" > .\encrypted_file.txt winzip32 -min -a -s"hello" archive.zip * dir - name: Compress Data and lock with password for Exfiltration with 7zip @@ -23495,9 +23495,9 @@ exfiltration: name: command_prompt elevation_required: false command: | - mkdir ./tmp/victim-files - cd ./tmp/victim-files - echo "This file will be encrypted" > ./encrypted_file.txt + mkdir .\tmp\victim-files + cd .\tmp\victim-files + echo "This file will be encrypted" > .\encrypted_file.txt 7z a archive.7z -pblue dir T1030: