BADFLICK

Malware & Tools · BADFLICK

· MalwareS0642 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

BADFLICK is a backdoor used by Leviathan in spearphishing campaigns first reported in 2018 that targeted the U.S. engineering and maritime industries.(Citation: FireEye Periscope March 2018)(Citation: Accenture MUDCARP March 2019)

Tactic Coverage

discovery (4)collection (2)stealth (2)command and control (1)execution (1)initial access (1)

Used By (1 groups)

G0065LeviathanMUDCARP, Kryptonite Panda

Techniques (10)

T1005Data from Local System

collection

T1016System Network Configuration Discovery

discovery

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1105Ingress Tool Transfer

command and control

T1140Deobfuscate/Decode Files or Information

stealth

T1204.002

References

https://attack.mitre.org/software/S0642 https://www.fireeye.com/blog/threat-research/2018/03/suspected-chinese-espionage-group-targeting-maritime-and-engineering-industries.html https://www.accenture.com/us-en/blogs/cyber-defense/mudcarps-focus-on-submarine-technologies