BADFLICK
Software · ATTACK:enterprise:S0642
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0642",
"title": "BADFLICK",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0642",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--57d83eac-a2ea-42b0-a7b2-c80c55157790",
"external_id": "S0642",
"domain": "enterprise",
"created": "2021-08-26T18:49:41.155Z",
"modified": "2025-04-25T14:43:25.093Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "FireEye Periscope March 2018",
"url": "https://www.fireeye.com/blog/threat-research/2018/03/suspected-chinese-espionage-group-targeting-maritime-and-engineering-industries.html"
},
{
"source_name": "Accenture MUDCARP March 2019",
"url": "https://www.accenture.com/us-en/blogs/cyber-defense/mudcarps-focus-on-submarine-technologies"
}
]
}Explicit source assertions (11)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--634d3199-9979-4df1-8fbe-5fc355726602
Accenture MUDCARP March 2019ATTACK:enterprise:G0065 → uses → ATTACK:enterprise:S0642
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6cccc84e-8b42-444c-8d18-12628b0e353c
Accenture MUDCARP March 2019 · FireEye Periscope March 2018ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1560.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7b05bdd0-2241-4b2d-a5a0-0531edca6311
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8170e34e-8342-4cbf-ae24-7bce63fb4d48
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9bce879f-ffe8-425b-81d6-10408902c397
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aacc2945-4ff1-4bf8-8428-1198eb6e127e
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af48f343-0359-444b-b6b4-1cddd36ddfd7
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1497.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7f2b493-8c91-4793-8206-52d302906b2b
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd531d92-8077-4b8e-9209-212b0c4d1b87
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c07e24ea-bf70-4f9c-a45e-73dfc0ede007
Accenture MUDCARP March 2019ATTACK:enterprise:S0642 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d1a489c9-f937-4cc8-85d0-b4ce6b961a62
Accenture MUDCARP March 2019