Dacls

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[Dacls](https://attack.mitre.org/software/S0497) is a multi-platform remote access tool used by [Lazarus Group](https://attack.mitre.org/groups/G0032) since at least December 2019.(Citation: TrendMicro macOS Dacls May 2020)(Citation: SentinelOne Lazarus macOS July 2020)

Associated Techniques (9)

ID	ATT&CK	Tactics
T1027.013	Encrypted/Encoded File	-
T1036	Masquerading	-
T1057	Process Discovery	-
T1071.001	Web Protocols	-
T1083	File and Directory Discovery	-
T1105	Ingress Tool Transfer	-
T1543.001	Launch Agent	-
T1543.004	Launch Daemon	-
T1564.001	Hidden Files and Directories	-

Used by Actors (1)

Lazarus Group
Nation-state

Metadata

ID:	150
Created:	13/01/2026 17:48
Updated:	23/04/2026 04:00