Check out the results from our first round of ATT&CK Evaluations at attackevals.mitre.org!

TinyZBot

TinyZBot is a bot written in C# that was developed by Cleaver. [1]

ID: S0004
Aliases: TinyZBot
Type: MALWARE
Platforms: Windows

Version: 1.0

Techniques Used

DomainIDNameUse
EnterpriseT1115Clipboard DataTinyZBot contains functionality to collect information from the clipboard.[1]
EnterpriseT1059Command-Line InterfaceTinyZBot supports execution from the command-line.[1]
EnterpriseT1089Disabling Security ToolsTinyZBot can disable Avira anti-virus.[1]
EnterpriseT1056Input CaptureTinyZBot contains keylogger functionality.[1]
EnterpriseT1050New ServiceTinyZBot can install as a Windows service for persistence.[1]
EnterpriseT1060Registry Run Keys / Startup FolderTinyZBot can create a shortcut in the Windows startup folder for persistence.[1]
EnterpriseT1113Screen CaptureTinyZBot contains screen capture functionality.[1]
EnterpriseT1023Shortcut ModificationTinyZBot can create a shortcut in the Windows startup folder for persistence.[1]

Groups

Groups that use this software:

Cleaver

References