#T1113 Screen Capture

Technique

  • Tactics: Collection
  • Description:

    Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as <code>CopyFromScreen</code>, <code>xwd</code>, or <code>screencapture</code>.(Citation: CopyFromScreen .NET)(Citation: Antiquated Mac Malware)

  • First Seen: The Evolution of Lazarus • 2020-04-16
MITRE ATT&CK

Tagged Reports

2024-08-05
KRNCSC
#Kimsuky #DoraRAT #TrollAgent #Andariel #T1119 #T1005 #T1083 #T1036 #T1074.001 #T1041 #T1113 #T1573.002 #T1195 #T1189 #T1204.002 #T1027.002 #T1071.001 #T1217
2024-07-19
Cyfirma
#Trend #Andariel #Kimsuky #MoonstoneSleet #Lazarus #T1562.001 #T1190 #T1068 #T1543.003 #T1056 #T1595.002 #T1059.003 #T1566 #T1485 #T1218.011 #T1069.002 #T1010 #T1571 #T1102.001 #T1583.001 #T1555.003 #T1033 #T1497.001 #T1203 #T1036 #T1012 #T1027 #T1583.003 #T1071 #T1562.004 #T1614 #T1027.005 #T1548 #T1552 #T1140 #T1005 #T1053.005 #T1564.001 #T1555 #T1129 #T1070.001 #T1046 #T1070 #T1095 #T1569.002 #T1562 #T1573 #T1047 #T1552.001 #T1057 #T1082 #T1518.001 #T1176 #T1090 #T1518 #T1539 #T1041 #T1564 #T1560 #T1202 #T1071.001 #T1547 #T1112 #T1497 #T1059.001 #T1124 #T1056.001 #T1222 #T1070.006 #T1059 #T1564.003 #T1222.001 #T1056.004 #T1547.001 #T1584 #T1087.002 #T1070.004 #T1505.003 #T1113 #T1608.005 #T1204.002 #T1087 #T1574.002 #T1115 #T1083 #T1490 #T1053 #T1486 #T1566.002 #T1133 #T1021.004 #T1003
2024-07-15
Darkatlas
#Kimsuky #TrollAgent #T1005 #T1518.001 #T1059.003 #T1070.004 #T1083 #T1036 #T1539 #T1041 #T1113 #T1016 #T1555.003 #T1218.011 #T1087.001 #T1027.002 #T1071.001 #T1057 #T1082
2024-06-27
Zscaler
#Kimsuky #TRANSLATEXT #T1176 #T1041 #T1059.001 #T1113 #T1555.003 #T1102.001 #T1071.001
2024-06-19
Cyberarmor
#Kimsuky #Niki #Nexaweb #T1547 #T1566 #T1071 #T1041 #T1113 #T1027 #T1204 #T1082
2024-04-03
Plainbit
#RokRAT #LNK #T1055 #T1005 #T1059.003 #T1082 #T1566.001 #T1027.010 #T1083 #T1059.001 #T1102.002 #T1113 #T1106 #T1033 #T1204.002 #T1622 #T1027.009
2024-02-08
S2W
#D2Innovation #TrollStealer #Kimsuky #T1005 #T1518.001 #T1059.003 #T1083 #T1539 #T1059.001 #T1041 #T1588.004 #T1113 #T1016 #T1560 #T1555.003 #T1204.002 #T1087.001 #T1027.002 #T1071.001 #T1057 #T1082
2024-02-07
S2W
#D2Innovation #TrollStealer #Kimsuky #T1005 #T1518.001 #T1059.003 #T1083 #T1539 #T1059.001 #T1041 #T1588.004 #T1113 #T1016 #T1560 #T1555.003 #T1204.002 #T1087.001 #T1027.002 #T1071.001 #T1057 #T1082
2023-10-27
Kaspersky
#LPEClient #SIGNBT #T1574.002 #T1027.001 #T1620 #T1203 #T1083 #T1041 #T1113 #T1189 #T1003.001 #T1573.001 #T1547.012 #T1027.002 #T1132.002 #T1071.001 #T1140 #T1057 #T1082
2023-05-30
Threat Mon
#APT37 #RokRAT #T1573 #T1497 #T1113 #T1018 #T1027 #T1071 #T1059
2023-05-23
Genians
#APT37 #LNK #RokRAT #T1598.002 #T1059.005 #T1001.002 #T1082 #T1059.003 #T1566.001 #T1567.002 #T1027.009 #T1005 #T1113 #T1204.002 #T1598.003 #T1055 #T1027.010 #T1083 #T1059.001 #T1027.003 #T1566.002 #T1497.001
2023-05-17
S2W
#Kimsuky #AlphaSeed #T1218.010 #T1113 #T1560 #T1567 #T1056.001 #T1547.001
2023-01-31
ESET
#Trend #T1102.002 #T1190 #T1027 #T1560.001 #T1567 #T1102 #T1027.002 #T1071 #T1574 #T1566.001 #T1566 #T1553.002 #T1090 #T1027.006 #T1567.002 #T1553 #T1584 #T1218 #T1027.007 #T1505 #T1505.003 #T1113 #T1555 #T1560 #T1071.004 #T1195 #T1204.002 #T1584.006 #T1218.001 #T1195.002 #T1574.002 #T1484.001 #T1484 #T1555.003 #T1204 #T1090.003 #T1003
2022-11-30
ESET
#Scarcruft #Dolphin #T1025 #T1102.002 #T1203 #T1016 #T1106 #T1027 #T1082 #T1119 #T1518.001 #T1074.001 #T1016.001 #T1547.001 #T1567.002 #T1005 #T1059.007 #T1053.005 #T1539 #T1010 #T1113 #T1020 #T1055.002 #T1071.001 #T1059.006 #T1083 #T1189 #T1124 #T1555.003 #T1033 #T1056.001 #T1560.002
2022-07-20
Securonix
#Konni #StiffBizon #T1059.005 #T1543.003 #T1057 #T1082 #T1134.001 #T1119 #T1548.002 #T1059.003 #T1566.001 #T1027.005 #T1070.004 #T1053.005 #T1539 #T1560.003 #T1113 #T1132.001 #T1020 #T1041 #T1204.002 #T1105 #T1071.001 #T1606.001 #T1007 #T1059.001 #T1053 #T1555.003 #T1033 #T1569.002
« Back