MITRE ATT&CKsoftware (malware)

S0369 CoinTicker

Published 2019-04-23 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
macOS
Version
1.1
Created
2019-04-23

Description

CoinTicker is a malicious application that poses as a cryptocurrency price ticker and installs components of the open source backdoors EvilOSX and EggShell.

Related

Uses · MITRE ATT&CK (9)

  • T1059.003 Windows Command Shell sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1059.006 Python sub-technique
  • T1564.001 Hidden Files and Directories sub-technique
  • T1553.001 Gatekeeper Bypass sub-technique
  • T1543.001 Launch Agent sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1105 Ingress Tool Transfer technique

References