Exbyte

Malware & Tools · Exbyte

· MalwareS1179 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Exbyte is an exfiltration tool written in Go that is uniquely associated with BlackByte operations. Observed since 2022, Exbyte transfers collected files to online file sharing and hosting services.(Citation: Symantec BlackByte 2022)

Tactic Coverage

discovery (4)stealth (4)execution (1)exfiltration (1)

Used By (1 groups)

G1043BlackByteHecamede

Techniques (9)

T1069.001Local Groups

discovery

T1070.004File Deletion

stealth

T1083File and Directory Discovery

discovery

T1106Native API

execution

T1140Deobfuscate/Decode Files or Information

stealth

T1480Execution Guardrails

stealth

T1497.001System Checks

References

https://attack.mitre.org/software/S1179 https://www.security.com/threat-intelligence/blackbyte-exbyte-ransomware