MALWARE-CNC Win.Trojan.Vidar download attempt

Description

Detects payload download activity associated with Win.Trojan.Vidar, a Windows malware family.

Related malware families

Related blogs

$Sandbox process tree for the Underground loader, showing an injected dllhost.exe launching chrome.exe and msedge.exe and staging stolen cookies under C:\ProgramData\Underground, before a second dllhost.exe deletes that folder.$

$100k in Crypto Drained by the Underground Operation

October 1, 20268 min read

OpenClaw's Hologram: Fake Installer Ships Rust Infostealer

May 7, 202615 min read

Threat Labs News Roundup: March 2023

April 10, 20234 min read

Threat Labs News Roundup: January 2023

February 16, 20234 min read