FLIPSIDE - S0173 (0e18b800-906c-4e44-a143-b11c72b3448b)
FLIPSIDE is a simple tool similar to Plink that is used by FIN5 to maintain access to victims. (Citation: Mandiant FIN5 GrrCON Oct 2016)
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| FLIPSIDE - S0173 (0e18b800-906c-4e44-a143-b11c72b3448b) | Malware | Protocol Tunneling - T1572 (4fe28b27-b13c-453e-a386-c2ef362a573b) | Attack Pattern | 1 |