S0272 · NDiskMonitor

malwareenterprise-attackS0272

NDiskMonitor

malware--d1183cb9-258e-4f2f-8415-50ac8252c49e

NDiskMonitor is a custom backdoor written in .NET that appears to be unique to Patchwork. (Citation: TrendMicro Patchwork Dec 2017)

External references

mitre-attackS0272Open reference

NDiskMonitor

TrendMicro Patchwork Dec 2017Open reference

Platforms

Windows

Kill chain phases

Only techniques sit in a kill chain phase.

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

S0272 · NDiskMonitor · Sunturai