#T1113 Screen Capture

Technique

  • Tactics: Collection
  • Description:

    Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as CopyFromScreen, xwd, or screencapture.(Citation: CopyFromScreen .NET)(Citation: Antiquated Mac Malware)

  • First Seen: The Evolution of Lazarus • 2020-04-16
MITRE ATT&CK

Tagged Reports

2022-04-29
PWC
#Trend #BlackBanshee #BlackAlicanto #T1589 #T1069 #T1190 #T1608 #T1036 #T1573 #T1036.007 #T1059.005 #T1068 #T1027 #T1570 #T1595 #T1048 #T1592 #T1615 #T1071 #T1482 #T1057 #T1082 #T1056 #T1059.003 #T1221 #T1566.001 #T1566 #T1074.001 #T1614.001 #T1016.001 #T1591 #T1548 #T1090 #T1547.001 #T1620 #T1049 #T1021 #T1135 #T1005 #T1078 #T1204.001 #T1070.004 #T1053.005 #T1041 #T1113 #T1132.001 #T1555 #T1560 #T1204.002 #T1105 #T1071.001 #T1039 #T1132 #T1547 #T1112 #T1070 #T1087 #T1083 #T1486 #T1124 #T1033 #T1210 #T1110 #T1095 #T1204 #T1059 #T1003
2022-04-15
Dragos
#Trend #WASSONITE #T1589 #T0840 #T1573 #T1036 #T1016 #T0884 #T0888 #T1071 #T0807 #T1056 #T1614 #T1082 #T1574 #T1566 #T1602 #T1591 #T0822 #T0858 #T1021 #T1480 #T1049 #T1584 #T0859 #T1140 #T1078 #T0806 #T1505 #T1041 #T1113 #T1555 #T1560 #T1564 #T0817 #T1132 #T1055 #T1547 #T1127 #T1083 #T1053 #T1189 #T1033 #T0819 #T1074 #T1059 #T1217
2021-12-22
Threatray
#Andariel #TigerRAT #T1059.007 #T1566.001 #T1041 #T1113 #T1486 #T1189 #T1027.003 #T1204.002 #T1036.005 #T1049 #T1056.001 #T1573.001 #T1497.001 #T1584.006 #T1095 #T1583.003 #T1071.001 #T1057
2021-11-29
Kaspersky
#Scarcruft #Chinotto #T1071.001 #T1566.001 #T1041 #T1059.001 #T1113 #T1059.005 #T1584.006 #T1033 #T1036.005 #T1573.001 #T1547.001 #T1560.002 #T1140 #T1082
2021-06-15
Kaspersky
#Andariel #Ransomware #Manuscrypt #T1059.007 #T1566.001 #T1041 #T1113 #T1486 #T1027.003 #T1204.002 #T1036.005 #T1049 #T1573.001 #T1497.001 #T1584.006 #T1095 #T1583.003 #T1071.001 #T1057
2021-06-01
Malwarebytes
#Kimsuky #AppleSeed #T1025 #T1134 #T1027 #T1082 #T1566.001 #T1547.001 #T1140 #T1585.002 #T1598 #T1583 #T1585.001 #T1005 #T1059.007 #T1587.001 #T1070.004 #T1041 #T1113 #T1560 #T1071.001 #T1218.010 #T1112 #T1083 #T1059.001 #T1056.001 #T1001
2021-03-23
Sygnia
#MATA #TFlower #Lazarus #T1055.001 #T1112 #T1070.004 #T1547.005 #T1562 #T1053.005 #T1070.003 #T1113 #T1572 #T1486 #T1021.002 #T1036.005 #T1573.001 #T1552.001 #T1021.001 #T1021.004 #T1070.001 #T1008
2020-08-26
USCISA
#BeagleBoyz #FASTCash2 #T1190 #T1562.001 #T1565.002 #T1543.003 #T1552.004 #T1056 #T1119 #T1565.003 #T1553.002 #T1485 #T1199 #T1021 #T1078 #T1010 #T1014 #T1574.001 #T1033 #T1203 #T1036 #T1012 #T1016 #T1059.005 #T1106 #T1027 #T1102 #T1071 #T1053.004 #T1027.005 #T1049 #T1140 #T1005 #T1129 #T1105 #T1110 #T1095 #T1489 #T1569.002 #T1573 #T1057 #T1082 #T1561.002 #T1518.001 #T1566.001 #T1548.003 #T1090 #T1041 #T1219 #T1560 #T1202 #T1562.003 #T1059.001 #T1189 #T1204 #T1070.006 #T1059 #T1101 #T1565.001 #T1056.004 #T1098 #T1547.001 #T1053.003 #T1562.006 #T1070.004 #T1505.003 #T1070.003 #T1113 #T1132.001 #T1020 #T1021.002 #T1218.001 #T1055 #T1087 #T1115 #T1083 #T1053 #T1486 #T1133 #T1021.001 #T1217
2020-08-14
USCISA
#Phishing #Konni #T1134.002 #T1016 #T1048.003 #T1057 #T1082 #T1548.002 #T1059.003 #T1566.001 #T1218.011 #T1547.001 #T1140 #T1070.004 #T1113 #T1132.001 #T1105 #T1071.001 #T1112 #T1115 #T1083 #T1059.001 #T1033 #T1036.005 #T1056.001 #T1555.003 #T1547.009 #T1546.015
2020-07-16
ESET
#Cryptocurrency #GMERA #T1159 #T1005 #T1139 #T1083 #T1518 #T1539 #T1497 #T1065 #T1113 #T1043 #T1040 #T1116 #T1048 #T1204 #T1059 #T1082
2020-04-16
Carbonblack
#HOTCROISSANT #T1005 #T1065 #T1113 #T1024 #T1033 #T1059 #T1132 #T1094 #T1140 #T1082 #Lazarus
« Back