Sınıf: Trojan
Kullanıcının faaliyetlerini elektronik olarak gözetlemek için tasarlanmış kötü amaçlı bir program (klavye girişini durdur, ekran görüntüsü al, etkin uygulamaların listesini yakala, vb.). Toplanan bilgiler, e-posta, FTP ve HTTP (istek üzerine veri göndererek) dahil olmak üzere çeşitli yollarla siber suçluya gönderilir.Platform: Script
Komut, bir görevi otomatikleştirmek için kullanılan bir program veya işlem kümesidir. Birçok farklı betik dili var.Aile: Trojan.Script.Agent
No family descriptionExamples
1CBF80C2EDE3AEEA81E8B115B85B9E99B6D3725C8EBE3FC698B420A246EDE5B5
9D7C74EC5CAE1F552DF8B1154733A240
D7D273E431FFBB99B587C32ACA32FE98
Tactics and Techniques: Mitre*
TA0005
Defense Evasion
The adversary is trying to avoid being detected. Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics' techniques are cross-listed here when those techniques include the added benefit of subverting defenses.
T1218.007
Msiexec
Adversaries may abuse msiexec.exe to proxy execution of malicious payloads. Msiexec.exe is the command-line utility for the Windows Installer and is thus commonly associated with executing installation packages (.msi). The Msiexec.exe binary may also be digitally signed by Microsoft.
* © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.