data-manipulation/encryption/aes
rule:
meta:
name: encrypt data using AES via .NET
namespace: data-manipulation/encryption/aes
authors:
- william.ballenthin@mandiant.com
scopes:
static: file
dynamic: unsupported # requires class features
att&ck:
- Defense Evasion::Obfuscated Files or Information [T1027]
mbc:
- Defense Evasion::Obfuscated Files or Information::Encryption-Standard Algorithm [E1027.m05]
- Cryptography::Encrypt Data::AES [C0027.001]
examples:
- b9f5bd514485fb06da39beff051b9fdc
features:
- and:
- class: System.Security.Cryptography.RijndaelManaged
- class: System.Security.Cryptography.CryptoStream
last edited: 2023-11-24 10:34:28