apt28

The XAgentOSX malware, as the group calls it, includes several artifacts and shared components that link it to its Windows version.