Spaceship
Description
(FireEye) SPACESHIP searches for files with a specified set of file extensions and copies them to a removable drive. FireEye believes that SHIPSHAPE is used to copy SPACESHIP to a removable drive, which could be used to infect another victim computer, including an air-gapped computer. SPACESHIP is then used to steal documents from the air-gapped system, copying them to a removable drive inserted into the SPACESHIP-infected system.
Names
| Name |
|---|
| Spaceship |
Category
Malware
Type
- Exfiltration
Information
Mitre Attack
Malpedia
Alienvault Otx
Other Information
Uuid
61a36a16-f4cb-4174-9151-7c5890c874b7
Last Card Change
2020-04-23