Komplex

Malware & Tools · Komplex

· MalwareS0162 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

macOS

Description

Komplex is a backdoor that has been used by APT28 on OS X and appears to be developed in a similar manner to XAgentOSX (Citation: XAgentOSX 2017) (Citation: Sofacy Komplex Trojan).

Tactic Coverage

discovery (2)stealth (2)command and control (2)persistence (1)privilege escalation (1)

Used By (1 groups)

G0007APT28IRON TWILIGHT, SNAKEMACKEREL

Techniques (7)

T1033System Owner/User Discovery

discovery

T1057Process Discovery

discovery

T1070.004File Deletion

stealth

T1071.001Web Protocols

command and control

T1543.001Launch Agent

persistenceprivilege escalation

T1564.001Hidden Files and Directories

stealth

References

https://attack.mitre.org/software/S0162 https://researchcenter.paloaltonetworks.com/2017/02/unit42-xagentosx-sofacys-xagent-macos-tool/https://researchcenter.paloaltonetworks.com/2016/09/unit42-sofacys-komplex-os-x-trojan/