TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Lobsters

This Wasm interpreter fits in a QR code

purplesyringa.moe via goldstein · 2 days ago · Read original ↗

ATT&CK techniques detected

2 predictions
T1027Obfuscated Files or Information
93%
“look similar, but their implementations are completely different : fn f64 _ to _ i32 ( x : f64 ) - > i32 { x as _ } fn f64 _ to _ u32 ( x : f64 ) - > u32 { x as _ } fn f64 _ to _ i64 ( x : f64 ) - > i64 { x as _ } fn f64 _ to _ u64 ( x : f64 ) - > u64 { x as _ } f64 _ to _ i32 : …”
T1027.001Binary Padding
51%
“( unsigned char opcode ) { / /... int d = 64 - bitness ; value < < = d ; / / shift out unused bits if ( opcode % 2 = = 0 ) { / / signed or pure 32 - bit value = ( long ) value > > d ; / / return the bits to the correct position with sign - extension if ( opcode < 0x30 ) { / / 32 …”

Summary

Comments