MITRE ATT&CKsoftware (malware)

S0035 SPACESHIP

Published 2017-05-31 Modified 2024-11-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31

Description

SPACESHIP is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps.

Related

Uses · MITRE ATT&CK (6)

  • T1074.001 Local Data Staging sub-technique
  • T1052.001 Exfiltration over USB sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1547.009 Shortcut Modification sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References