S0581Windows

S0581IronNetInjector

Platforms
1
ATT&CK
14.1
References
2

Description

[IronNetInjector](https://attack.mitre.org/software/S0581) is a [Turla](https://attack.mitre.org/groups/G0010) toolchain that utilizes scripts from the open-source IronPython implementation of Python with a .NET injector to drop one or more payloads including [ComRAT](https://attack.mitre.org/software/S0126).(Citation: Unit 42 IronNetInjector February 2021 )

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupTurlag0010100%live

References

  1. https://attack.mitre.org/software/S0581
  2. https://unit42.paloaltonetworks.com/ironnetinjector/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
ComRAT
Software
ISMInjector
Software
GuLoader
Software
InnaputRAT
Software
VERMIN
Software
CARROTBAT
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.