MITRE ATT&CKsoftware (tool)
S0434 Imminent Monitor
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2020-05-05
Description
Imminent Monitor was a commodity remote access tool (RAT) offered for sale from 2012 until 2019, when an operation was conducted to take down the Imminent Monitor infrastructure. Various cracked versions and variations of this RAT are still in circulation.
Related
Uses · MITRE ATT&CK (16)
- T1685 Disable or Modify Tools technique
- T1496.001 Compute Hijacking sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1021.001 Remote Desktop Protocol sub-technique
- T1056.001 Keylogging sub-technique
- T1070.004 File Deletion sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1027 Obfuscated Files or Information technique
- T1041 Exfiltration Over C2 Channel technique
- T1057 Process Discovery technique
- T1059 Command and Scripting Interpreter technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1123 Audio Capture technique
- T1125 Video Capture technique
References
- https://unit42.paloaltonetworks.com/imminent-monitor-a-rat-down-under/ Imminent Unit42 Dec2019