Unit 42. (2019, December 2). Imminent Monitor – a RAT Down Under. Retrieved May 5, 2020.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1056.001 Keylogging |
ToolImminent Monitor | Imminent Monitor has a keylogging module. |
| T1057 Process Discovery |
ToolImminent Monitor | Imminent Monitor has a "Process Watcher" feature to monitor processes in case the client ever crashes or gets closed. |
| T1123 Audio Capture |
ToolImminent Monitor | Imminent Monitor has a remote microphone monitoring capability. |
| T1125 Video Capture |
ToolImminent Monitor | Imminent Monitor has a remote webcam monitoring capability. |
| T1496.001 Compute Hijacking |
ToolImminent Monitor | Imminent Monitor has the capability to run a cryptocurrency miner on the victim machine. |
| T1685 Disable or Modify Tools |
ToolImminent Monitor | Imminent Monitor has a feature to disable Windows Task Manager. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
