The Python Trojan

In the python Trojan I will be using, I will first execute the Trojan then fork a child process. The parent process will execute legitimate processes that will display information about the machine including CPU/RAM usage as well as processes running on the machine. It will sleep for 3 seconds and then display the new updated information about the machine. The child process will simultaneously execute the trojan, it will first decrompress the malware blob then write it to disk.

This will finally execute the malware that is a command and control server, better known as a C2.