IronNetInjector

MITRE
Tipo Malware:
Tool
Prima attivita:
Unknown
Ultima attivita:
Unknown
Dettagli:

[IronNetInjector](https://attack.mitre.org/software/S0581) is a [Turla](https://attack.mitre.org/groups/G0010) toolchain that utilizes scripts from the open-source IronPython implementation of Python with a .NET injector to drop one or more payloads including [ComRAT](https://attack.mitre.org/software/S0126).(Citation: Unit 42 IronNetInjector February 2021 )

Tecniche Associate (8)
ID ATT&CK Tattiche
T1027.013 Encrypted/Encoded File -
T1036.004 Masquerade Task or Service -
T1053.005 Scheduled Task -
T1055 Process Injection -
T1055.001 Dynamic-link Library Injection -
T1057 Process Discovery -
T1059.006 Python -
T1140 Deobfuscate/Decode Files or Information -
Usato da Attori (1)
Metadata
ID: 757
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00