Class: Server-Proxy
Such programs function as a proxy server. For this reason, malicious users include them in bundles of malicious program in order to send out spam or other malicious content from the victim computer. Such programs are not malicious. If a user has installed such a program on his/her computer, or if it was installed by a system administrator, then it does not pose any threat.Read more
Platform: Win32
Win32 is an API on Windows NT-based operating systems (Windows XP, Windows 7, etc.) that supports execution of 32-bit applications. One of the most widespread programming platforms in the world.Family: Luminati
No family descriptionExamples
C0E3ACA7A99E31641FB518C5F4B748F78768B95820080BB2E12E635876A4F39B
B66CA837E75662AB698709A0F1EF333B
6CAFF2BEBBDD901FC0697054AB81BE47
C941F6EF833442882F77FCC609A9BF26
Tactics and Techniques: Mitre*
Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive. Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
* © 2025 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.