Tropic Trooper’s USBferry Targets Air-Gapped Networks
Tags
country: Hong Kong Philippines Taiwan
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Web Shell - T1505.003 Windows Service - T1543.003 Tool - T1588.002 Vulnerabilities - T1588.006 Rundll32 - T1085 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID 5bbd4a58-48b8-43e4-a829-658a976ae846
Fingerprint bd8c1cd685b08f81
Analysis status DONE
Considered CTI value 0
Text language
Published May 12, 2020, midnight
Added to db Oct. 15, 2024, 5:33 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Tropic Trooper’s USBferry Targets Air-Gapped Networks
Title Tropic Trooper’s USBferry Targets Air-Gapped Networks
Detected Hints/Tags/Attributes 77/2/4
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/20/e/tropic-troopers-back-usbferry-attack-targets-air-gapped-environments.html
Details Source https://www.trendmicro.com/en_gb/research/20/e/tropic-troopers-back-usbferry-attack-targets-air-gapped-environments.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details File 1018 
rundll32.exe
Details File 2 
flash_en.inf
Details File 1 
c:\users\public\documents\flash folder and names it flash.dat
Details File 2 
flash_en.dat