Malware: Kivars

Description

[Kivars](https://attack.mitre.org/software/S0437) is a modular remote access tool (RAT), derived from the Bifrost RAT, that was used by [BlackTech](https://attack.mitre.org/groups/G0098) in a 2010 campaign.(Citation: TrendMicro BlackTech June 2017)

External References

• mitre-attack
• TrendMicro BlackTech June 2017

Techniques Used by This Malware

• T1021 — Remote Services
• T1056.001 — Keylogging
• T1070.004 — File Deletion
• T1083 — File and Directory Discovery
• T1105 — Ingress Tool Transfer
• T1113 — Screen Capture
• T1564.003 — Hidden Window

APT Groups Using This Malware

• BlackTech