Technique
№ 013 · class: execution
Payload Obfuscation
Payload obfuscation involves applying techniques to conceal the content and intent of malicious code. Attackers use encryption, compression, encoding, polymorphism, and packing to evade detection by security tools.
Term
description · examples · notesPayload obfuscation involves applying techniques to conceal the content and intent of malicious code. Attackers use encryption, compression, encoding, polymorphism, and packing to evade detection by security tools.
Description
This technique is applied across all attack phases, from malware delivery via email to communication with command servers.
Examples
- Multi-layer packing of malware to bypass antivirus signatures
- Encrypting a malicious payload that is only decrypted in memory
- Polymorphic malware that changes its code on each execution
Notes
- Behavior-based detection is more effective than signatures for discovering obfuscated malware.
Mentioned in the news
Threats
used by 4Threats that use it. Select one to open its page.
Defenses
countered by 3How it is countered. Select one to open its page.