DOWNIISSA
- ID
- S9021
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 24 Apr 2026
DOWNIISSA is a shellcode downloader that has been used by MirrorFace since at least 2022 to deploy payloads, including the LODEINFO backdoor.[1]
Techniques used (7)
- T1027.013 Encrypted/Encoded File
- T1055 Process Injection
- T1070.004 File Deletion
- T1105 Ingress Tool Transfer
- T1106 Native API
- T1140 Deobfuscate/Decode Files or Information
- T1218.007 Msiexec