NDiskMonitor

Malware & Tools · NDiskMonitor

· MalwareS0272 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

NDiskMonitor is a custom backdoor written in .NET that appears to be unique to Patchwork. (Citation: TrendMicro Patchwork Dec 2017)

Tactic Coverage

discovery (3)command and control (2)

Used By (1 groups)

Techniques (5)

T1033System Owner/User Discovery

discovery

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1105Ingress Tool Transfer

command and control

T1573.001Symmetric Cryptography

command and control

References