MITRE ATT&CKsoftware (malware)

S1179 Exbyte

Published 2024-12-17 Modified 2025-03-09 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-12-17

Description

Exbyte is an exfiltration tool written in Go that is uniquely associated with BlackByte operations. Observed since 2022, Exbyte transfers collected files to online file sharing and hosting services.

Related

Uses · MITRE ATT&CK (9)

  • T1069.001 Local Groups sub-technique
  • T1567 Exfiltration Over Web Service technique
  • T1497.001 System Checks sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1070.004 File Deletion sub-technique
  • T1480 Execution Guardrails technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1083 File and Directory Discovery technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

References