S1200 StealBit

malwareEnterprise

platformsWindows

also known asStealBit

StealBit is a data exfiltration tool that is developed and maintained by the operators of the the LockBit Ransomware-as-a-Service (RaaS) and offered to affiliates to exfiltrate data from compromised systems for double extortion purposes.

techniques used (15)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1027.013Encrypted/Encoded File
T1030Data Transfer Size Limits
T1070.004File Deletion
T1071.001Web Protocols
T1082System Information Discovery
T1083File and Directory Discovery
T1095Non-Application Layer Protocol
T1106Native API
T1140Deobfuscate/Decode Files or Information
T1480Execution Guardrails
T1559Inter-Process Communication
T1614.001System Language Discovery
T1622Debugger Evasion
T1685Disable or Modify Tools

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan