Classe: Trojan-Clicker
Les programmes classés comme Trojan-Clicker sont conçus pour accéder aux ressources Internet (généralement des pages Web). Cela s'effectue soit en envoyant les commandes appropriées au navigateur, soit en remplaçant les fichiers système qui fournissent des adresses "standard" pour les ressources Internet (comme le fichier hosts Windows). Un utilisateur malveillant peut utiliser les programmes Trojan-Clicker pour: augmenter le nombre de visites sur certains sites afin d'augmenter le nombre de visites d'annonces en ligne; mener une attaque DoS (Denial of Service) sur un serveur particulier; .Plus d'informations
Plateforme: Win32
Win32 est une API sur les systèmes d'exploitation Windows NT (Windows XP, Windows 7, etc.) qui prend en charge l'exécution des applications 32 bits. L'une des plateformes de programmation les plus répandues au monde.Famille: Trojan-Clicker.Win32.Agent
No family descriptionExamples
4A9588E6A0B503F1A1536C3ED53D19DFEE7069D912CA914B769416C7C0F8CEBE
FB3CC220001D37C7EC3C08555EAA0374
Tactics and Techniques: Mitre*
TA0005
Defense Evasion
The adversary is trying to avoid being detected. Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics' techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
T1036
Masquerading
Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
T1070.010
Relocate Malware
Once a payload is delivered, adversaries may reproduce copies of the same malware on the victim system to remove evidence of their presence and/or avoid defenses. Copying malware payloads to new locations may also be combined with File Deletion to cleanup older artifacts.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.