Peppy — Malware Profile

Peppy is a Python-based remote access Trojan, active since at least 2012, with similarities to Crimson.

MITRE ATT&CK techniques (7)

• T1020 Automated Exfiltration
• T1056.001 Keylogging
• T1059.003 Windows Command Shell
• T1071.001 Web Protocols
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1113 Screen Capture

Attributed threat actors

• Transparent Tribe

Read the full analysis on IntelFusions