Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0028
SHIPSHAPE
Published 2017-05-31
Modified 2024-11-17
Official page ↗
Domain
enterprise
Version
1.0
Created
2017-05-31
Description
SHIPSHAPE
is malware developed by
APT30
that allows propagation and exfiltration of data over removable devices.
APT30
may use this capability to exfiltrate data across air-gaps.
Related
Uses · MITRE ATT&CK
(3)
T1547.009
Shortcut Modification
sub-technique
T1547.001
Registry Run Keys / Startup Folder
sub-technique
T1091
Replication Through Removable Media
technique
Referenced by MITRE ATT&CK · uses
(1)
G0013
APT30
group
References
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/05/20081935/rpt-apt30.pdf
FireEye APT30