S0434 Imminent Monitor

toolEnterprise

platformsWindows

also known asImminent Monitor

Imminent Monitor was a commodity remote access tool (RAT) offered for sale from 2012 until 2019, when an operation was conducted to take down the Imminent Monitor infrastructure. Various cracked versions and variations of this RAT are still in circulation.

techniques used (16)

ATT&CK techniques this enables or maps to.

T1021.001Remote Desktop Protocol
T1027Obfuscated Files or Information
T1041Exfiltration Over C2 Channel
T1056.001Keylogging
T1057Process Discovery
T1059Command and Scripting Interpreter
T1070.004File Deletion
T1083File and Directory Discovery
T1106Native API
T1123Audio Capture
T1125Video Capture
T1140Deobfuscate/Decode Files or Information
T1496.001Compute Hijacking
T1555.003Credentials from Web Browsers
T1564.001Hidden Files and Directories
T1685Disable or Modify Tools

used by groups (2)

Threat groups associated with this.

G0099APT-C-36
G1018TA2541

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan