IronNetInjector (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 21:17:33 UTC
win.ironnetinjector (Back to overview)
IronNetInjector
According to Mitre, IronNetInjector is a Turla toolchain that utilizes scripts from the open-source IronPython
implementation of Python with a .NET injector to drop one or more payloads including ComRAT.
References
2021-02-19 ⋅ Palo Alto Networks Unit 42 ⋅ Dominik Reichel
IronNetInjector: Turla’s New Malware Loading Tool
Agent.BTZ IronNetInjector TurlaRPC
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.ironnetinjector
https://malpedia.caad.fkie.fraunhofer.de/details/win.ironnetinjector
Page 1 of 1