ID	C0053
Objective(s)	Data
Related ATT&CK Techniques	None
Version	2.0
Created	29 December 2020
Last Modified	1 March 2023

Decode Data

Malware may decode data.

Methods

Name	ID	Description
Base64	C0053.001	Malware may decode data using base64.
XOR	C0053.002	Malware may use XOR to decode data.

Use in Malware

Name	Date	Method	Description
Snake	2004	C0053.001	Snake decodes data stored in base64 during the unpacking process [1]

References

[1] https://www.cybereason.com/blog/research/threat-analysis-report-snake-infostealer-malware