TDTESS

· MalwareS0164 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

TDTESS is a 64-bit .NET binary backdoor used by CopyKittens. (Citation: ClearSky Wilted Tulip July 2017)

Tactic Coverage

stealth (2)execution (1)command and control (1)persistence (1)privilege escalation (1)

Used By (1 groups)

Techniques (5)

T1059.003Windows Command Shell

execution

T1070.004File Deletion

stealth

T1070.006Timestomp

stealth

T1105Ingress Tool Transfer

command and control

T1543.003Windows Service

persistenceprivilege escalation

References