Netskope Threat Labs

Powdow

ATP Sandbox Adv. Heuristics

Powdow is a detection name for PowerShell-based downloaders.

First seen
February 2022
Last seen
October 2026
Alert Name
Document-Excel.Downloader.Powdow
Document-HTML.Downloader.Powdow
Document-HTML.Trojan.Powdow
Document-Office.Downloader.Powdow
Document-Office.Dropper.Powdow
Document-Office.Trojan.Powdow
Document-PowerPoint.Trojan.Powdow
Document-Word.Downloader.Powdow
Document-Word.Dropper.Powdow
Script-BAT.Downloader.Powdow