S9053 MiniJunk

malwareEnterprise

platformsWindows

also known asMiniJunk

MiniJunk is a custom malware designed for long-term persistence and remote code execution. MiniJunk  was first observed in 2025 and is a modified version of the MiniBike framework that was first observed in June 2022. MiniJunk has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.

techniques used (15)

ATT&CK techniques this enables or maps to.

T1027Obfuscated Files or Information
T1027.013Encrypted/Encoded File
T1027.015Compression
T1027.016Junk Code Insertion
T1033System Owner/User Discovery
T1057Process Discovery
T1070.004File Deletion
T1071.001Web Protocols
T1074.001Local Data Staging
T1082System Information Discovery
T1083File and Directory Discovery
T1105Ingress Tool Transfer
T1106Native API
T1547.001Registry Run Keys / Startup Folder
T1553.002Code Signing

used by groups (1)

Threat groups associated with this.

G1059NIMBUS MANTICORE

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan