MITRE ATT&CK Malware

BACKSPACE (S0031)

Lecna

[BACKSPACE](https://attack.mitre.org/software/S0031) is a backdoor used by [APT30](https://attack.mitre.org/groups/G0013) that dates back to at least 2005. (Citation: FireEye APT30)

Platforms: Windows

▪Techniques implemented (14)

T1082System Information Discovery T1112Modify Registry T1059.003Windows Command Shell T1012Query Registry T1071.001Web Protocols T1057Process Discovery T1132.002Non-Standard Encoding T1090.001Internal Proxy T1547.001Registry Run Keys / Startup Folder T1041Exfiltration Over C2 Channel T1083File and Directory Discovery T1104Multi-Stage Channels T1547.009Shortcut Modification T1686Disable or Modify System Firewall

▪Used by groups (1)

G0013APT30

S0031on MITRE ATT&CK →

MITRE ATT&CK Malware

BACKSPACE (S0031)

Lecna

ShareX LinkedIn Reddit HN

[BACKSPACE](https://attack.mitre.org/software/S0031) is a backdoor used by [APT30](https://attack.mitre.org/groups/G0013) that dates back to at least 2005. (Citation: FireEye APT30)

Platforms: Windows

▪Techniques implemented (14)

▪Used by groups (1)

G0013APT30

S0031on MITRE ATT&CK →

BACKSPACE (S0031)

▪Techniques implemented (14)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

BACKSPACE (S0031)

▪Techniques implemented (14)

▪Used by groups (1)