MITRE ATT&CK / Software / S0271

KEYMARBLE

ID

S0271

Type

Malware

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

22 Oct 2025

Techniques used (11)

• T1016 System Network Configuration Discovery
• T1057 Process Discovery
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1112 Modify Registry
• T1113 Screen Capture
• T1573.001 Symmetric Cryptography
• T1680 Local Storage Discovery

Groups using it (1)

• G0032 Lazarus Group

References

1. US-CERT KEYMARBLE Aug 2018