S0081Windows

S0081Elise

Platforms
1
ATT&CK
14.1
References
3

Description

[Elise](https://attack.mitre.org/software/S0081) is a custom backdoor Trojan that appears to be used exclusively by [Lotus Blossom](https://attack.mitre.org/groups/G0030). It is part of a larger group of tools referred to as LStudio, ST Group, and APT0LSTU. (Citation: Lotus Blossom Jun 2015)(Citation: Accenture Dragonfish Jan 2018)

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupLotus Blossomg0030100%live

References

  1. https://attack.mitre.org/software/S0081
  2. https://www.paloaltonetworks.com/resources/research/unit42-operation-lotus-blossom.html
  3. https://www.accenture.com/t20180127T003755Z_w_/us-en/_acnmedia/PDF-46/Accenture-Security-Dragonfish-Threat-Analysis.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Emissary
Software
Elise Backdoor
Software
Felismus
Software
Linfo
Software
Esile
Software
Lizar
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.