Patchfirst
T1036.006Stealth

Space after Filename

Adversaries can hide a program's true filetype by changing the extension of a file. With certain file types (specifically this does not work with.app extensions), appending a space to the end of a filename will change how the file is processed by the operating system. For example, if there is a Mach-O executable file called evil.bin, when it is double clicked by a user, it will launch…

attack.mitre.org ↗
CVEs0
In 0
Reports0

Detections

1 Sigma rule tagged T1036.006
Space after FilenameT1036.0061 general rule

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Space after Filename

0 CVEs, by priority. Each link shows its badge.

No CVEs are linked to this technique yet.

↑ ↓ chooseEnter openEsc close