TinyMet

aliases

Last seen:Mar 17, 2026

Intelligence Profile

TinyMet is a meterpreter stager.

Threat Analysis

TinyMet is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://github.com/SherifEldeeb/TinyMet

→https://outpost24.com/blog/using-qiling-framework-to-unpack-ta505-packed-samples/

→https://securityintelligence.com/posts/ta505-continues-to-infect-networks-with-sdbbot-rat/

→https://ti.qianxin.com/uploads/2020/02/13/cb78386a082f465f259b37dae5df4884.pdf

→https://twitter.com/VK_Intel/status/1273292957429510150

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

TiniMetwin.tinymetTinyMet

External Intelligence

Malpedia: win.tinymet

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search TinyMet