AppleJeus
MITREOther
Unknown
Unknown
[AppleJeus](https://attack.mitre.org/software/S0584) is a family of downloaders initially discovered in 2018 embedded within trojanized cryptocurrency applications. [AppleJeus](https://attack.mitre.org/software/S0584) has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032), targeting companies in the energy, finance, government, industry, technology, and telecommunications sectors, and several countries including the United States, United Kingdom, South Korea, Australia, Brazil, New Zealand, and Russia. [AppleJeus](https://attack.mitre.org/software/S0584) has been used to distribute the [FALLCHILL](https://attack.mitre.org/software/S0181) RAT.(Citation: CISA AppleJeus Feb 2021)
Associated Techniques (20)
| ID | ATT&CK | Tactics |
|---|---|---|
| T1027 | Obfuscated Files or Information | - |
| T1041 | Exfiltration Over C2 Channel | - |
| T1053.005 | Scheduled Task | - |
| T1059.004 | Unix Shell | - |
| T1070.004 | File Deletion | - |
| T1071.001 | Web Protocols | - |
| T1082 | System Information Discovery | - |
| T1140 | Deobfuscate/Decode Files or Information | - |
| T1204.001 | Malicious Link | - |
| T1204.002 | Malicious File | - |
| T1218.007 | Msiexec | - |
| T1497.003 | Time Based Checks | - |
| T1543.003 | Windows Service | - |
| T1543.004 | Launch Daemon | - |
| T1546.016 | Installer Packages | - |
Used by Actors (1)
Metadata
| ID: | 622 |
| Created: | 13/01/2026 17:48 |
| Updated: | 06/03/2026 16:00 |