MITRE ATT&CKsoftware (malware)
S9053 MiniJunk
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2026-09-24
Description
MiniJunk is a custom malware designed for long-term persistence and remote code execution. MiniJunk was first observed in 2025 and is a modified version of the MiniBike framework that was first observed in June 2022. MiniJunk has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.
Related
Uses · MITRE ATT&CK (15)
- T1027.015 Compression sub-technique
- T1027.016 Junk Code Insertion sub-technique
- T1027.013 Encrypted/Encoded File sub-technique
- T1071.001 Web Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1553.002 Code Signing sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1027 Obfuscated Files or Information technique
- T1033 System Owner/User Discovery technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
Referenced by MITRE ATT&CK · uses (1)
- G1059 NIMBUS MANTICORE group
References
- https://research.checkpoint.com/2025/nimbus-manticore-deploys-new-malware-targeting-europe/ CheckPoint_NimbusManticoreEurope_Sept2025