MITRE ATT&CK Malware

ISMInjector (S0189)

[ISMInjector](https://attack.mitre.org/software/S0189) is a Trojan used to install another [OilRig](https://attack.mitre.org/groups/G0049) backdoor, ISMAgent. (Citation: OilRig New Delivery Oct 2017)

Platforms: Windows

▪Techniques implemented (4)

T1140Deobfuscate/Decode Files or Information T1027Obfuscated Files or Information T1055.012Process Hollowing T1053.005Scheduled Task

▪Used by groups (1)

G0049OilRig

S0189on MITRE ATT&CK →

MITRE ATT&CK Malware

ISMInjector (S0189)

ShareX LinkedIn Reddit HN

[ISMInjector](https://attack.mitre.org/software/S0189) is a Trojan used to install another [OilRig](https://attack.mitre.org/groups/G0049) backdoor, ISMAgent. (Citation: OilRig New Delivery Oct 2017)

Platforms: Windows