Update Date
01/18/2024

Class: Backdoor

Backdoors are designed to give malicious users remote control over an infected computer. In terms of functionality, Backdoors are similar to many administration systems designed and distributed by software developers. These types of malicious programs make it possible to do anything the author wants on the infected computer: send and receive files, launch files or delete them, display messages, delete data, reboot the computer, etc. The programs in this category are often used in order to unite a group of victim computers and form a botnet or zombie network. This gives malicious users centralized control over an army of infected computers which can then be used for criminal purposes. There is also a group of Backdoors which are capable of spreading via networks and infecting other computers as Net-Worms do. The difference is that such Backdoors do not spread automatically (as Net-Worms do), but only upon a special “command” from the malicious user that controls them.

Read more

Platform: Java

Java is a platform for developing and running programs written in the Java programming language.

Family: Trojan.Win64.Agent

No family description

Examples

0E2E376E80CC6E24BC6DF6556F171E3D
DB70709116FBFB9BE9D4072DADD33B1A
CF2F34C55DE5C0D59468AC21421F862F
6BC163B6AB3E072337AA3314BE1C74D8
8432BA4C116DA1467A9E5D71E8A22B39

Tactics and Techniques: Mitre*

TA0007
Discovery

Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.


T1012
Query Registry

Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.


* © 2025 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.