Netskope Threat Labs

Runner

ATP Sandbox Adv. HeuristicsAV

Runner is a generic detection name for malware loaders that execute additional payloads in memory to avoid disk-based detection.

First seen
January 2022
Last seen
October 2026
Alert Name
Binary.Trojan.Runner
ByteCode-MSIL.Trojan.Runner
Document-CHM.Trojan.Runner
Document-HTML.Trojan.Runner
Document-Office.Trojan.Runner
Document-PDF.Trojan.Runner
Dropped:Trojan.Runner.BS
Generic.Lnk.Runner.A.268CFF24
Generic.Lnk.Runner.A.690FAF76
Generic.Lnk.Runner.A.F3490233