AppleJeus
- ID
- S0584
- Type
- Malware
- Platforms
- Windows, macOS
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
AppleJeus is a family of downloaders initially discovered in 2018 embedded within trojanized cryptocurrency applications. AppleJeus has been used by Lazarus Group, targeting companies in the energy, finance, government, industry, technology, and telecommunications sectors, and several countries including the United States, United Kingdom, South Korea, Australia, Brazil, New Zealand, and Russia. AppleJeus has been used to distribute the FALLCHILL RAT.[1]
Techniques used (20)
- T1027 Obfuscated Files or Information
- T1041 Exfiltration Over C2 Channel
- T1053.005 Scheduled Task
- T1059.004 Unix Shell
- T1070.004 File Deletion
- T1071.001 Web Protocols
- T1082 System Information Discovery
- T1140 Deobfuscate/Decode Files or Information
- T1204.001 Malicious Link
- T1204.002 Malicious File
- T1218.007 Msiexec
- T1497.003 Time Based Checks
- T1543.003 Windows Service
- T1543.004 Launch Daemon
- T1546.016 Installer Packages
- T1548.002 Bypass User Account Control
- T1553.002 Code Signing
- T1564.001 Hidden Files and Directories
- T1566.002 Spearphishing Link
- T1569.001 Launchctl