Класс: Trojan
Вредоносная программа, занимающаяся уничтожением, блокированием, модификацией или копированием информации, нарушением работы компьютеров или компьютерных сетей, и при этом не попавшая ни в один из классов троянских программ.Подробнее
Платформа: MSIL
MSIL (Microsoft Intermediate Language; новое название – CIL, Common Intermediate Language) – промежуточный язык, разработанный компанией Microsoft для платформы .NET Framework. Код на языке CIL генерируют все компиляторы .NET компании Microsoft, входящие в среду разработки Microsoft Visual Studio (Visual Basic .NET, Visual C++, Visual C# и другие).Семейство: Trojan.MSIL.Agent
Нет описания семействаПримеры
342DCEAE1006B0B42B3916A199A89172E06C3D8716EC73123B6F37AC25163B3F
F2FC67C2C2E49C7C189E166EAA1BAC14
229DC7A958278E989718265B39245F46
2DEB7997F6B4B875EA335C838E41F628
Тактики и Техники: Mitre*
TA0005
Defense Evasion
The adversary is trying to avoid being detected. Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics' techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
T1036.008
Masquerade File Type
Adversaries may masquerade malicious payloads as legitimate files through changes to the payload's formatting, including the file’s signature, extension, icon, and contents. Various file types have a typical standard format, including how they are encoded and organized. For example, a file’s signature (also known as header or magic bytes) is the beginning bytes of a file and is often used to identify the file’s type. For example, the header of a JPEG file, is
0xFF 0xD8 and the file extension is either `.JPE`, `.JPEG` or `.JPG`. * © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.