MITRE ATT&CKsoftware (malware)

S0467 TajMahal

Published 2020-06-08 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2020-06-08

Description

TajMahal is a multifunctional spying framework that has been in use since at least 2014. TajMahal is comprised of two separate packages, named Tokyo and Yokohama, and can deploy up to 80 plugins.

Related

Uses · MITRE ATT&CK (24)

  • T1518.001 Security Software Discovery sub-technique
  • T1560.002 Archive via Library sub-technique
  • T1056.001 Keylogging sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1539 Steal Web Session Cookie technique
  • T1518 Software Discovery technique
  • T1005 Data from Local System technique
  • T1016 System Network Configuration Discovery technique
  • T1020 Automated Exfiltration technique
  • T1025 Data from Removable Media technique
  • T1027 Obfuscated Files or Information technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1112 Modify Registry technique
  • T1113 Screen Capture technique
  • T1115 Clipboard Data technique
  • T1119 Automated Collection technique
  • T1120 Peripheral Device Discovery technique
  • T1123 Audio Capture technique
  • T1124 System Time Discovery technique
  • T1125 Video Capture technique
  • T1129 Shared Modules technique

References