MITRE ATT&CKsoftware (malware)

S0387 KeyBoy

Published 2019-06-14 Modified 2024-04-18 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2019-06-14

Description

KeyBoy is malware that has been used in targeted campaigns against members of the Tibetan Parliament in 2016.

Related

Uses · MITRE ATT&CK (18)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1001.003 Protocol or Service Impersonation sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1059.006 Python sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1559.002 Dynamic Data Exchange sub-technique
  • T1056.001 Keylogging sub-technique
  • T1070.006 Timestomp sub-technique
  • T1547.004 Winlogon Helper DLL sub-technique
  • T1543.003 Windows Service sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique

Referenced by MITRE ATT&CK · uses (1)

  • G0081 Tropic Trooper group

References