Třída: Trojan-GameThief
Tento typ škodlivého programu je navržen tak, aby ukradl informace o uživatelských účtech pro online hry. Data jsou pak předána uživateli se zlými úmysly, který kontroluje Trojan. E-mail, FTP, web (včetně dat v žádosti) nebo jiné metody mohou být použity k přepravě ukradených dat.Platfoma: Win32
Win32 je rozhraní API v operačních systémech Windows NT (Windows XP, Windows 7 atd.), Které podporují provádění 32bitových aplikací. Jedna z nejrozšířenějších programovacích platforem na světě.Family: Trojan-GameThief.Win32.OnLineGames
No family descriptionExamples
C17A1254C8E4C7D917E5ABA8A8A7C58D910E709F6D858A61D2CF4EAFF9360F24
8A529A14DD2AC805C739B7493EE11C06
91B4DB926826BDF6BC8403E451CCB9F8
4B63CFA314D8B39949242C9FEF7D9FE3
Tactics and Techniques: Mitre*
TA0005
Defense Evasion
The adversary is trying to avoid being detected. Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics' techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
T1218.010
Regsvr32
Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. The Regsvr32.exe binary may also be signed by Microsoft.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.