MITRE ATT&CK Malware

KEYMARBLE (S0271)

[KEYMARBLE](https://attack.mitre.org/software/S0271) is a Trojan that has reportedly been used by the North Korean government. (Citation: US-CERT KEYMARBLE Aug 2018)

Platforms: Windows

▪Techniques implemented (11)

T1016System Network Configuration Discovery T1057Process Discovery T1059.003Windows Command Shell T1083File and Directory Discovery T1105Ingress Tool Transfer T1082System Information Discovery T1680Local Storage Discovery T1113Screen Capture T1112Modify Registry T1573.001Symmetric Cryptography T1070.004File Deletion

▪Used by groups (1)

G0032Lazarus Group

S0271on MITRE ATT&CK →

MITRE ATT&CK Malware

KEYMARBLE (S0271)

ShareX LinkedIn Reddit HN

[KEYMARBLE](https://attack.mitre.org/software/S0271) is a Trojan that has reportedly been used by the North Korean government. (Citation: US-CERT KEYMARBLE Aug 2018)

Platforms: Windows

▪Techniques implemented (11)

▪Used by groups (1)

G0032Lazarus Group

S0271on MITRE ATT&CK →

KEYMARBLE (S0271)

▪Techniques implemented (11)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

KEYMARBLE (S0271)

▪Techniques implemented (11)

▪Used by groups (1)