NDiskMonitor is a custom backdoor written in .NET that appears to be unique to Patchwork.
Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.