JSS Loader — Malware Profile

JSS Loader is Remote Access Trojan (RAT) with .NET and C++ variants that has been used by FIN7 since at least 2020.

MITRE ATT&CK techniques (7)

• T1053.005 Scheduled Task
• T1059.001 PowerShell
• T1059.005 Visual Basic
• T1059.007 JavaScript
• T1105 Ingress Tool Transfer
• T1204.002 Malicious File
• T1566.001 Spearphishing Attachment

Attributed threat actors

• FIN7

Read the full analysis on IntelFusions