IronNetInjector (9ca96281-8ff9-4619-a79d-16c5a9594eae)
IronNetInjector is a Turla toolchain that utilizes scripts from the open-source IronPython implementation of Python with a .NET injector to drop one or more payloads including ComRAT.[Unit 42 IronNetInjector February 2021 ]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| IronNetInjector (9ca96281-8ff9-4619-a79d-16c5a9594eae) | Tidal Software | Turla (47ae4fb1-fc61-4e8e-9310-66dda706e1a2) | Tidal Groups | 1 |