MITRE ATT&CKsoftware (malware)

S0036 FLASHFLOOD

Published 2017-05-31 Modified 2024-11-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31

Description

FLASHFLOOD is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps.

Related

Uses · MITRE ATT&CK (6)

  • T1074.001 Local Data Staging sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1005 Data from Local System technique
  • T1025 Data from Removable Media technique
  • T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References