Search/AppleSeed
● Malware

AppleSeed

AppleSeed is a backdoor that has been used by Kimsuky to target South Korean government, academic, and commercial targets since at least 2021.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
35 relationships
T1560.001: Archive via Utility
source
T1113: Screen Capture
source
T1056.001: Keylogging
source
T1059.007: JavaScript
source
T1025: Data from Removable Media
source
T1074.001: Local Data Staging
source
T1036.005: Match Legitimate Resource Name or Location
source
T1204.002: Malicious File
source
T1566.001: Spearphishing Attachment
source
T1119: Automated Collection
source
T1082: System Information Discovery
source
T1106: Native API
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1567: Exfiltration Over Web Service
source
T1036: Masquerading
source
T1560: Archive Collected Data
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1059.001: PowerShell
source
T1547.001: Registry Run Keys / Startup Folder
source
T1027: Obfuscated Files or Information
source
T1218.010: Regsvr32
source
T1030: Data Transfer Size Limits
source
T1070.004: File Deletion
source
T1134: Access Token Manipulation
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1008: Fallback Channels
source
T1124: System Time Discovery
source