Description
Batloader is a loader that performs the initial compromise in malware infection chains and executes payloads such as Ursnif. It reaches victims through installers for legitimate software, including Zoom, TeamViewer, and Visual Studio. Threat actors host the bundled installers on compromised websites.
Stats
- First seen
- February 2023
- Last seen
- October 2026
Also known as
BatLoader
Alert name variants
| Alert Name |
|---|
| Script-BAT.Trojan.Batloader |
| Script-JS.Trojan.Batloader |
| Script-JS.Trojan.BatLoader |
| Script-PowerShell.Trojan.Batloader |
| Script-Python.Trojan.Batloader |
| Win32.Trojan.Batloader |
| Win32.Trojan.BatLoader |
| Win64.Trojan.Batloader |
