MITRE ATT&CK Malware

TDTESS (S0164)

[TDTESS](https://attack.mitre.org/software/S0164) is a 64-bit .NET binary backdoor used by [CopyKittens](https://attack.mitre.org/groups/G0052). (Citation: ClearSky Wilted Tulip July 2017)

Platforms: Windows

▪Techniques implemented (5)

T1070.004File Deletion T1105Ingress Tool Transfer T1059.003Windows Command Shell T1070.006Timestomp T1543.003Windows Service

▪Used by groups (1)

G0052CopyKittens

S0164on MITRE ATT&CK →

MITRE ATT&CK Malware

TDTESS (S0164)

ShareX LinkedIn Reddit HN

[TDTESS](https://attack.mitre.org/software/S0164) is a 64-bit .NET binary backdoor used by [CopyKittens](https://attack.mitre.org/groups/G0052). (Citation: ClearSky Wilted Tulip July 2017)

Platforms: Windows