Zero-Dwell Threat Intelligence Reports

Doina-Style Loader Executing Dropped Payloads and Modifying Run Keys.exe

detect-debug-environment idle spreader

Stealer Loader Uses Long-Sleeps, Anti-Debug Checks, and Clipboard Harvesting.exe

64bits detect-debug-environment checks-cpu-name

Go-Built RAT with RequestBin DNS Callbacks and Long-Sleep Evasion.exe

64bits overlay

Malware Downloader Embeds Azorult Payload and Ransom.Stop Traces.exe

spreader

CryptoLocker Precursor Executable Embeds Overlay Resources and Spreader Traits.exe

overlay spreader

Trojanized Unity Component Disguised as Editor Plugin with C2 Indicators.dll

detect-debug-environment assembly

Win32 Upatre/Zbot Downloader Beacons and Executes Crypto-Encryptor.exe

overlay spreader

Trojanized GUI EXE Uses PowerShell Stagers to Install Stealer Modules.exe

spreader assembly

Amadey/Doina Trojan Fetcher Using HTTP C2 and Hidden Install Folder.exe

spreader

Trojanized WinRAR EXE Adds Defender Exclusions and Harvests Logins.exe

spreader assembly

Large CryEngine EXE Packs Overlayed Stealer with Injector Traits.exe

SFX-Packed Trojan Masks as SystemHelper and Beacons for Secondary Tasks.exe

overlay