MITRE ATT&CKsoftware (malware)

S0648 JSS Loader

Published 2021-09-22 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.0
Created: 2021-09-22

Description

JSS Loader is Remote Access Trojan (RAT) with .NET and C++ variants that has been used by FIN7 since at least 2020.

Related

Uses · MITRE ATT&CK (7)

T1059.007 JavaScript sub-technique
T1204.002 Malicious File sub-technique
T1059.001 PowerShell sub-technique
T1059.005 Visual Basic sub-technique
T1566.001 Spearphishing Attachment sub-technique
T1053.005 Scheduled Task sub-technique
T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

G0046 FIN7 group

References

https://www.esentire.com/security-advisories/notorious-cybercrime-gang-fin7-lands-malware-in-law-firm-using-fake-legal-complaint-against-jack-daniels-owner-brown-forman-inc eSentire FIN7 July 2021
https://www.crowdstrike.com/blog/carbon-spider-embraces-big-game-hunting-part-1/ CrowdStrike Carbon Spider August 2021