USBferry

Malware & Tools · USBferry

· MalwareS0452 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

USBferry is an information stealing malware and has been used by Tropic Trooper in targeted attacks against Taiwanese and Philippine air-gapped military environments. USBferry shares an overlapping codebase with YAHOYAH, though it has several features which makes it a distinct piece of malware.(Citation: TrendMicro Tropic Trooper May 2020)

Tactic Coverage

discovery (7)collection (1)execution (1)lateral movement (1)initial access (1)stealth (1)

Used By (1 groups)

G0081Tropic TrooperPirate Panda, KeyBoy

Techniques (11)

T1005Data from Local System

collection

T1016System Network Configuration Discovery

discovery

T1018Remote System Discovery

discovery

T1049System Network Connections Discovery

discovery

T1057Process Discovery

discovery

T1059.003Windows Command Shell

execution

T1083File and Directory Discovery

References

https://attack.mitre.org/software/S0452 https://documents.trendmicro.com/assets/Tech-Brief-Tropic-Trooper-s-Back-USBferry-Attack-Targets-Air-gapped-Environments.pdf