TDTESS — Malware Profile

TDTESS is a 64-bit .NET binary backdoor used by CopyKittens.

MITRE ATT&CK techniques (5)

• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1070.006 Timestomp
• T1105 Ingress Tool Transfer
• T1543.003 Windows Service

Attributed threat actors

• CopyKittens

Read the full analysis on IntelFusions