ZxxZ — Malware Profile
ZxxZ is a trojan written in Visual C++ that has been used by BITTER since at least August 2021, including against Bangladeshi government personnel.
MITRE ATT&CK techniques (14)
- T1005 Data from Local System
- T1012 Query Registry
- T1027.013 Encrypted/Encoded File
- T1033 System Owner/User Discovery
- T1036.004 Masquerade Task or Service
- T1053.005 Scheduled Task
- T1057 Process Discovery
- T1082 System Information Discovery
- T1105 Ingress Tool Transfer
- T1106 Native API
- T1140 Deobfuscate/Decode Files or Information
- T1204.002 Malicious File
- T1518.001 Security Software Discovery
- T1566.001 Spearphishing Attachment