Modify Hardware
September 20, 2023 ยท View on GitHub
| ID | B0042 |
| Objective(s) | Impact |
| Related ATT&CK Techniques | None |
| Impact Type | Breach |
| Version | 2.1 |
| Created | 4 December 2020 |
| Last Modified | 13 September 2023 |
Modify Hardware
Malware modifies hardware.
Methods
| Name | ID | Description |
|---|---|---|
| CDROM | B0042.001 | The CD-ROM is modified. |
| Mouse | B0042.002 | The mouse is modified. |
| Printer | B0042.003 | The printer is modified. |
Use in Malware
| Name | Date | Method | Description |
|---|---|---|---|
| BadUSB | 2014 | -- | BadUSB can modify USB drives. [1] |
Detection
| Tool: capa | Mapping | APIs |
|---|---|---|
| swap mouse buttons | Modify Hardware::Mouse (B0042.002) | user32.SwapMouseButton |
| manipulate CD-ROM drive | Modify Hardware::CDROM (B0042.001) | winmm.mciSendString |
References
[1] https://www.bleepingcomputer.com/news/security/fbi-hackers-use-badusb-to-target-defense-firms-with-ransomware/