Skip to content

S1176 attrib

attrib is a Windows utility used to display, set or remove attributes assigned to files or directories.1

Item Value
ID S1176
Associated Names
Type TOOL
Version 1.0
Created 04 December 2024
Last Modified 02 January 2025
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1564 Hide Artifacts -
enterprise T1564.001 Hidden Files and Directories attrib can be used to make files or directories hidden.12453

References

  1. Xelu86, et al. (2023, September 25). attrib. Retrieved November 22, 2024. ↩↩

  2. Divya. (2024, April 30). Darkgate Malware Leveraging Autohotkey Following Teams. Retrieved November 22, 2024. ↩

  3. Levene, B., Grunzweig, J. (2018, March 5). Sure, I’ll take that! New ComboJack Malware Alters Clipboards to Steal Cryptocurrency. Retrieved November 25, 2024. ↩

  4. Noerenberg, E., Costis, A., and Quist, N. (2017, May 16). A Technical Analysis of WannaCry Ransomware. Retrieved December 8, 2024. ↩

  5. Pal, P. (2017, May 16). CRYING IS FUTILE: SandBlast Forensic Analysis of WannaCry. Retrieved November 22, 2024. ↩