NativeZone

MITRE

Tipo Malware:
Other

Prima attivita:
Unknown

Ultima attivita:
Unknown

Dettagli:

[NativeZone](https://attack.mitre.org/software/S0637) is the name given collectively to disposable custom [Cobalt Strike](https://attack.mitre.org/software/S0154) loaders used by [APT29](https://attack.mitre.org/groups/G0016) since at least 2021.(Citation: MSTIC Nobelium Toolset May 2021)(Citation: SentinelOne NobleBaron June 2021)

Tecniche Associate (6)

ID	ATT&CK	Tattiche
T1036	Masquerading	-
T1140	Deobfuscate/Decode Files or Information	-
T1204.002	Malicious File	-
T1218.011	Rundll32	-
T1480	Execution Guardrails	-
T1497.001	System Checks	-

Usato da Attori (1)

APT29
Nation-state

Metadata

ID:	505
Created:	13/01/2026 17:48
Updated:	07/03/2026 16:00