BITSAdmin

BITSAdmin is a command line tool used to create and manage BITS Jobs. [1]

ID: S0190
Type: TOOL
Platforms: Windows
Contributors: Edward Millington
Version: 1.1

Techniques Used

Domain ID Name Use
Enterprise T1197 BITS Jobs

BITSAdmin can be used to create BITS Jobs to launch a malicious process.[2]

Enterprise T1048 Exfiltration Over Alternative Protocol

BITSAdmin can be used to create BITS Jobs to upload files from a compromised host.[1]

Enterprise T1105 Remote File Copy

BITSAdmin can be used to create BITS Jobs to upload and/or download files.[1]

Groups That Use This Software

ID Name References
G0065 Leviathan [3]
G0081 Tropic Trooper [2]

References