MITRE ATT&CK Malware

BLACKCOFFEE (S0069)

[BLACKCOFFEE](https://attack.mitre.org/software/S0069) is malware that has been used by several Chinese groups since at least 2013. (Citation: FireEye APT17) (Citation: FireEye Periscope March 2018)

Platforms: Windows

▪Techniques implemented (7)

T1083File and Directory Discovery T1104Multi-Stage Channels T1059.003Windows Command Shell T1057Process Discovery T1102.001Dead Drop Resolver T1070.004File Deletion T1102.002Bidirectional Communication

▪Used by groups (3)

G0065Leviathan G0025APT17 G0096APT41

S0069on MITRE ATT&CK →

MITRE ATT&CK Malware

BLACKCOFFEE (S0069)

ShareX LinkedIn Reddit HN

[BLACKCOFFEE](https://attack.mitre.org/software/S0069) is malware that has been used by several Chinese groups since at least 2013. (Citation: FireEye APT17) (Citation: FireEye Periscope March 2018)

Platforms: Windows

▪Techniques implemented (7)

▪Used by groups (3)

G0065Leviathan G0025APT17 G0096APT41

S0069on MITRE ATT&CK →

BLACKCOFFEE (S0069)

▪Techniques implemented (7)

▪Used by groups (3)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

BLACKCOFFEE (S0069)

▪Techniques implemented (7)

▪Used by groups (3)