Třída: Hoax
Podvod je falešné varování o viru nebo jiném škodlivém kódu. Obvykle je podvod ve formě e-mailové zprávy upozorňující čtenáře na nový nebezpečný virus a naznačuje, že čtenář předá zprávu. Hoaxy samy o sobě nepoškodí, ale jejich distribuce u významných uživatelů často způsobuje strach a nejistotu.Většina dodavatelů antiviru obsahuje informace o podvodných událostech na svých webových stránkách a je vždy vhodné prověřit před odesláním varovných zpráv.
Platfoma: Win32
Win32 je rozhraní API v operačních systémech Windows NT (Windows XP, Windows 7 atd.), Které podporují provádění 32bitových aplikací. Jedna z nejrozšířenějších programovacích platforem na světě.Family: Hoax.Win32.DeceptPCClean
No family descriptionExamples
43C78D27532B0B0C85F0C3967579871B0E62BF14F39E380318EB6F432099DA79
B3CAAAA3E53232142BE6A66FCDC828F8
9750018A94D020A3D16C91A9495A7EC0
FAF93E2822A399FD76BF44C4671849B5
Tactics and Techniques: Mitre*
TA0007
Discovery
The adversary is trying to figure out your environment.
Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network. These techniques help adversaries observe the environment and orient themselves before deciding how to act. They also allow adversaries to explore what they can control and what’s around their entry point in order to discover how it could benefit their current objective. Native operating system tools are often used toward this post-compromise information-gathering objective.
Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network. These techniques help adversaries observe the environment and orient themselves before deciding how to act. They also allow adversaries to explore what they can control and what’s around their entry point in order to discover how it could benefit their current objective. Native operating system tools are often used toward this post-compromise information-gathering objective.
T1016
System Network Configuration Discovery
Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp, ipconfig/ifconfig, nbtstat, and route.
Adversaries may also leverage a Network Device CLI on network devices to gather information about configurations and settings, such as IP addresses of configured interfaces and static/dynamic routes (e.g.
Adversaries may use the information from System Network Configuration Discovery during automated discovery to shape follow-on behaviors, including determining certain access within the target network and what actions to do next.
Adversaries may also leverage a Network Device CLI on network devices to gather information about configurations and settings, such as IP addresses of configured interfaces and static/dynamic routes (e.g.
show ip route, show ip interface).(Citation: US-CERT-TA18-106A)(Citation: Mandiant APT41 Global Intrusion )Adversaries may use the information from System Network Configuration Discovery during automated discovery to shape follow-on behaviors, including determining certain access within the target network and what actions to do next.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.