StealBit

StealBit is a data exfiltration tool that is developed and maintained by the operators of the the LockBit Ransomware-as-a-Service (RaaS) and offered to affiliates to exfiltrate data from compromised systems for double extortion purposes.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

17 relationships

T1027.013: Encrypted/Encoded File

source

T1082: System Information Discovery

source

T1106: Native API

source

T1005: Data from Local System

source

T1140: Deobfuscate/Decode Files or Information

source

T1083: File and Directory Discovery

source

T1480: Execution Guardrails

source

T1559: Inter-Process Communication

source

T1685: Disable or Modify Tools

source

T1614.001: System Language Discovery

source

T1095: Non-Application Layer Protocol

source

T1030: Data Transfer Size Limits

source

T1070.004: File Deletion

source

T1071.001: Web Protocols

source

T1622: Debugger Evasion

source