Malware: ISMInjector

Description

[ISMInjector](https://attack.mitre.org/software/S0189) is a Trojan used to install another [OilRig](https://attack.mitre.org/groups/G0049) backdoor, ISMAgent. (Citation: OilRig New Delivery Oct 2017)

External References

• mitre-attack
• OilRig New Delivery Oct 2017

Techniques Used by This Malware

• T1027 — Obfuscated Files or Information
• T1053.005 — Scheduled Task
• T1055.012 — Process Hollowing
• T1140 — Deobfuscate/Decode Files or Information

APT Groups Using This Malware

• OilRig