MITRE ATT&CKsoftware (malware)
S0143 Flame
- Domain
- enterprise, ics
- Platforms
- Windows
- Aliases
- Flamer, sKyWIper
- Version
- 1.1
- Created
- 2017-05-31
Description
Flame is a sophisticated toolkit that has been used to collect information since at least 2010, largely targeting Middle East countries.
Related
Uses · MITRE ATT&CK (12)
- T1036.010 Masquerade Account Name sub-technique
- T0893 Data from Local System technique
- T0882 Theft of Operational Information technique
- T1011.001 Exfiltration Over Bluetooth sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1136.001 Local Account sub-technique
- T1547.002 Authentication Package sub-technique
- T1218.011 Rundll32 sub-technique
- T1210 Exploitation of Remote Services technique
- T1091 Replication Through Removable Media technique
- T1113 Screen Capture technique
- T1123 Audio Capture technique
References
- https://securelist.com/the-flame-questions-and-answers-51/34344/ Kaspersky Flame
- https://www.crysys.hu/publications/files/skywiper.pdf Crysys Skywiper
- https://www.symantec.com/connect/blogs/flamer-recipe-bluetoothache Symantec Beetlejuice