S0098 T9000

malwareEnterprise

platformsWindows

also known asT9000

T9000 is a backdoor that is a newer variant of the T5000 malware family, also known as Plat1. Its primary function is to gather information about the victim. It has been used in multiple targeted attacks against U.S.-based organizations.

techniques used (13)

ATT&CK techniques this enables or maps to.

T1016System Network Configuration Discovery
T1033System Owner/User Discovery
T1082System Information Discovery
T1113Screen Capture
T1119Automated Collection
T1120Peripheral Device Discovery
T1123Audio Capture
T1124System Time Discovery
T1125Video Capture
T1518.001Security Software Discovery
T1546.010AppInit DLLs
T1560.003Archive via Custom Method
T1574.001DLL

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan