Terralogger
- Malware type
- keylogger
- Family
- Malware family
- Profile updated
- 2026-07-07 15:22:37
Targeted industries: financial-services
Context
TerraLogger is a standalone keylogger malware developed by Golden Chickens, a financially motivated threat actor. It uses a common low-level keyboard hook to record keystrokes and writes the logs to local files. The malware is typically delivered as an OCX file and employs initial execution checks before proceeding. Upon execution, it opens a file handle to log keystrokes and implements its keylogger using a SetWindowsHookExA hook. Keystrokes are written to the open log file, with special characters handled accordingly. Five distinct TerraLogger samples were identified, reflecting minor updates and active development.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Terralogger (report)
- recordedfuture.com — Terrastealerv2 And Terralogger (report)