Product
IAStorHelp.exe
- First Reported
- Apr 18, 2026
- Latest Reported
- Apr 18, 2026
Reported Context (1)
- the .NET AppDomainManager to execute malicious code inside a legitimately signed Intel utility (IAStorHelp.exe), combining JIT-based shellcode, reflective loading, direct syscalls, and CDN-based domain fronting Operation PhantomCLR Abuses .NET AppDomainManager for Stealthy Malware Execution
MITRE ATT&CK (15)
Vendors (2)
Tools (1)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.