Sınıf: Hoax
Bir aldatmaca, bir virüs veya başka bir zararlı kod parçası hakkında sahte bir uyarıdır. Tipik olarak bir aldatmaca, tehlikeli yeni bir virüsün okuyucusunu uyaran ve okuyucunun mesajı ilettiğini ileri süren bir e-posta mesajı biçiminde olur. Aldatmacalar kendilerine zarar vermez, fakat iyi niyetli kullanıcılar tarafından dağıtımı genellikle korku ve belirsizliğe neden olur. Çoğu virüsten koruma yazılımı satıcıları web sitelerinde aldatmaca bilgileri içerir ve uyarı mesajlarını iletmeden önce her zaman kontrol edilmesi önerilir.Platform: Win32
Win32, 32-bit uygulamaların yürütülmesini destekleyen Windows NT tabanlı işletim sistemlerinde (Windows XP, Windows 7, vb.) Bir API'dir. Dünyanın en yaygın programlama platformlarından biri.Aile: Hoax.Win32.ArchSMS
No family descriptionExamples
72894D852D73696772B18EEC1EB59A79D216FF9220187D46006706CCBAB386B9
391020888782420F91D58B4F4AEE9DB6
8D61D3189216F07503770AD0EE0000B3
207391D6AEC443CE2A7097D23958CD9A
Tactics and Techniques: Mitre*
TA0005
Defense Evasion
The adversary is trying to avoid being detected.
Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics’ techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics’ techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
T1036
Masquerading
Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Renaming abusable system utilities to evade security monitoring is also a form of Masquerading.(Citation: LOLBAS Main Site) Masquerading may also include the use of Proxy or VPNs to disguise IP addresses, which can allow adversaries to blend in with normal network traffic and bypass conditional access policies or anti-abuse protections.
Renaming abusable system utilities to evade security monitoring is also a form of Masquerading.(Citation: LOLBAS Main Site) Masquerading may also include the use of Proxy or VPNs to disguise IP addresses, which can allow adversaries to blend in with normal network traffic and bypass conditional access policies or anti-abuse protections.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.