MITRE ATT&CKsoftware (malware)
S0584 AppleJeus
- Domain
- enterprise
- Platforms
- Windows, macOS
- Version
- 1.1
- Created
- 2021-03-01
Description
AppleJeus is a family of downloaders initially discovered in 2018 embedded within trojanized cryptocurrency applications. AppleJeus has been used by Lazarus Group, targeting companies in the energy, finance, government, industry, technology, and telecommunications sectors, and several countries including the United States, United Kingdom, South Korea, Australia, Brazil, New Zealand, and Russia. AppleJeus has been used to distribute the FALLCHILL RAT.
Related
Uses · MITRE ATT&CK (20)
- T1546.016 Installer Packages sub-technique
- T1071.001 Web Protocols sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1569.001 Launchctl sub-technique
- T1059.004 Unix Shell sub-technique
- T1497.003 Time Based Checks sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1553.002 Code Signing sub-technique
- T1070.004 File Deletion sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1218.007 Msiexec sub-technique
- T1543.003 Windows Service sub-technique
- T1543.004 Launch Daemon sub-technique
- T1053.005 Scheduled Task sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1027 Obfuscated Files or Information technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G0032 Lazarus Group group
References
- https://us-cert.cisa.gov/ncas/alerts/aa21-048a CISA AppleJeus Feb 2021