Skip to content

S0190 BITSAdmin

BITSAdmin is a command line tool used to create and manage BITS Jobs. 1

Item Value
ID S0190
Associated Names
Type TOOL
Version 1.2
Created 18 April 2018
Last Modified 20 March 2020
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1197 BITS Jobs BITSAdmin can be used to create BITS Jobs to launch a malicious process.3
enterprise T1048 Exfiltration Over Alternative Protocol -
enterprise T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol BITSAdmin can be used to create BITS Jobs to upload files from a compromised host.1
enterprise T1105 Ingress Tool Transfer BITSAdmin can be used to create BITS Jobs to upload and/or download files.1
enterprise T1570 Lateral Tool Transfer BITSAdmin can be used to create BITS Jobs to upload and/or download files from SMB file servers.2

Groups That Use This Software

ID Name References
G0081 Tropic Trooper 3
G0065 Leviathan 4
G0137 Ferocious Kitten 5
G0096 APT41 6

References

Back to top