The NCCIC has provided a Malware Analysis Report (MAR) of KEYMARBLE, a Trojan malware variant used by HIDDEN COBRA. The U.S. government refers to all malicious cyber activity by the North Korean government as HIDDEN COBRA. This MAR includes malware descriptions related to HIDDEN COBRA, suggested response actions and recommended mitigation techniques. The NCCIC encourages users or administrators to flag activity associated with the malware, report the activity to the NCCIC (nccic@hq.dhs.gov) or the FBI Cyber Watch (CyWatch) (cywatch@ic.fbi.gov), and give the activity the highest priority for enhanced mitigation. NCCIC/US-CERT