クラス: Trojan-GameThief
このタイプの悪質なプログラムは、オンラインゲームのユーザーアカウント情報を盗むように設計されています。データは、トロイの木馬を制御する悪質なユーザーに送信されます。盗まれたデータを転送するために、電子メール、FTP、ウェブ（要求内のデータを含む）、または他の方法を使用することができる。プラットフォーム: MSIL
Common Intermediate Language（旧称Microsoft Intermediate Language、またはMSIL）は、Microsoftが.NET Framework用に開発した中間言語です。 CILコードは、Microsoft Visual Studio（Visual Basic .NET、Visual C ++、Visual C＃など）のすべてのMicrosoft .NETコンパイラによって生成されます。ファミリー: Trojan-GameThief.MSIL.Worgtop
No family descriptionExamples
036607DFFE173C290ECE1C7AC591C595Tactics and Techniques: Mitre*
TA0011
Command and Control
The adversary is trying to communicate with compromised systems to control them. Command and Control consists of techniques that adversaries may use to communicate with systems under their control within a victim network. Adversaries commonly attempt to mimic normal, expected traffic to avoid detection. There are many ways an adversary can establish command and control with various levels of stealth depending on the victim's network structure and defenses.
T1095
Non-Application Layer Protocol
Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive. Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.