クラス: Trojan-Spy
トロイの木馬 - スパイプログラムは、ユーザーの行動を偵察するために使用されます（キーボードで入力されたデータの追跡、スクリーンショットの作成、実行中のアプリケーションのリストの取得など）。電子メール、FTP、ウェブ（要求内のデータを含む）および他の方法を使用してデータを送信することができる。プラットフォーム: Win64
Win64は、32ビット/ 64ビットアプリケーションを実行するための、Windowsベースのオペレーティングシステム上のプラットフォームです。 32ビットバージョンのWindowsでは、Win64プログラムを起動できません。ファミリー: Trojan-Spy.Win64.Agent
No family descriptionExamples
8F203C22E6DB05CF90F48F6641967D4ATactics and Techniques: Mitre*
TA0007
Discovery
The adversary is trying to figure out your environment. Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network. These techniques help adversaries observe the environment and orient themselves before deciding how to act. They also allow adversaries to explore what they can control and what's around their entry point in order to discover how it could benefit their current objective. Native operating system tools are often used toward this post-compromise information-gathering objective.
T1120
Peripheral Device Discovery
Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.