Skip to content

Malware

Terralogger

TerraLogger is a standalone keylogger malware developed by Golden Chickens, a financially motivated threat actor.

Terralogger is a Windows malware family operated by VENOM SPIDER.

Background

TerraLogger is a self-contained keylogger built by Golden Chickens, a financially driven threat actor. It captures keystrokes with a typical low-level keyboard hook and saves the logs to files on disk. Usually distributed as an OCX file, the malware runs initial execution checks before continuing; once running, it opens a file handle for logging and sets up its keylogger via a SetWindowsHookExA hook, writing captured keystrokes to the open log file and handling special characters as needed. Researchers found five separate TerraLogger samples, indicating minor revisions and ongoing development.


Source: Malpedia (Fraunhofer FKIE).