Search/TajMahal
● Malware

TajMahal

TajMahal is a multifunctional spying framework that has been in use since at least 2014. TajMahal is comprised of two separate packages, named Tokyo and Yokohama, and can deploy up to 80 plugins.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
24 relationships
T1113: Screen Capture
source
T1056.001: Keylogging
source
T1129: Shared Modules
source
T1123: Audio Capture
source
T1539: Steal Web Session Cookie
source
T1025: Data from Removable Media
source
T1119: Automated Collection
source
T1115: Clipboard Data
source
T1120: Peripheral Device Discovery
source
T1082: System Information Discovery
source
T1005: Data from Local System
source
T1560.002: Archive via Library
source
T1112: Modify Registry
source
T1125: Video Capture
source
T1016: System Network Configuration Discovery
source
T1020: Automated Exfiltration
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1027: Obfuscated Files or Information
source
T1518.001: Security Software Discovery
source
T1518: Software Discovery
source
T1124: System Time Discovery
source
T1055.001: Dynamic-link Library Injection
source