Class: Trojan-Spy
Trojan-Spy programs are used to spy on a user’s actions (to track data entered by keyboard, make screen shots, retrieve a list of running applications, etc.) The harvested information is then transmitted to the malicious user controlling the Trojan. Email, FTP, the web (including data in a request) and other methods can be used to transmit the data.Read more
Platform: Python
Python is a platform that is represented by scripts written in Python and binary files generated when these scripts are compiled.Family: Trojan-Spy.MSIL.KeyLogger
No family descriptionExamples
AA6D0F31F9171E93CF6305A40F958D4D793D6663558CE798D2F8A5EF31E41A4D
20C84DC4FC763ABD80E56B162739831B
FA277B1454C91E8A367B64E0A108D102
687B7B27C843AC820F3AD8D40AC8ADD2
Tactics and Techniques: Mitre*
TA0005
Defense Evasion
Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
T1112
Modify Registry
Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
* © 2025 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.