TDTESS

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[TDTESS](https://attack.mitre.org/software/S0164) is a 64-bit .NET binary backdoor used by [CopyKittens](https://attack.mitre.org/groups/G0052). (Citation: ClearSky Wilted Tulip July 2017)

Associated Techniques (5)

ID	ATT&CK	Tactics
T1059.003	Windows Command Shell	-
T1070.004	File Deletion	-
T1070.006	Timestomp	-
T1105	Ingress Tool Transfer	-
T1543.003	Windows Service	-

Used by Actors (1)

CopyKittens
Nation-state

Metadata

ID:	42
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00