Windows

Diantz.exeDiantz.exe

Platform
Windows
Abuse functions
3
Mapped techniques
3

Description

Diantz.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Execute. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1105, T1218, T1564.004. Defenders should monitor execution of Diantz.exe under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 3

Hide data compressed into an Alternate Data Stream.

DownloadT1105

Download and compress into a cab file.

ExecuteT1036

Bypass command-line based detections

MITRE ATT&CK techniques· 3

T1564.004T1105T1036

Uses3

TypeTargetConfidenceTier
TechniqueIngress Tool Transfert1105100%live
TechniqueMasqueradingt1036100%live
SubTechniqueNTFS File Attributest1564.004100%live

Abuses3

TypeTargetConfidenceTier
SubTechniqueNTFS File Attributest1564.00490%live
TechniqueIngress Tool Transfert110585%live
TechniqueSystem Binary Proxy Executiont121885%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
dnx.exe
LOLbin
Dxcap.exe
LOLbin
adplus.exe
LOLbin
dsdbutil.exe
LOLbin
dtutil.exe
LOLbin
Ldifde.exe
Sourced from LOLBAS Project. Curated by Adam Lundqvist, SQUR.