Skip to content

S0190 BITSAdmin

BITSAdmin is a command line tool used to create and manage BITS Jobs. 1

Item Value
ID S0190
Associated Names
Type TOOL
Version 1.3
Created 18 April 2018
Last Modified 13 October 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1197 BITS Jobs BITSAdmin can be used to create BITS Jobs to launch a malicious process.2
enterprise T1048 Exfiltration Over Alternative Protocol -
enterprise T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol BITSAdmin can be used to create BITS Jobs to upload files from a compromised host.1
enterprise T1105 Ingress Tool Transfer BITSAdmin can be used to create BITS Jobs to upload and/or download files.1
enterprise T1570 Lateral Tool Transfer BITSAdmin can be used to create BITS Jobs to upload and/or download files from SMB file servers.3

Groups That Use This Software

ID Name References
G0065 Leviathan 4
G0081 Tropic Trooper 2
G1001 HEXANE 5
G0137 Ferocious Kitten 6
G0096 APT41 7

References