Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
2CLoader: A New Malware Loader Delivering Vidar and Remus
Malware Families
Excerpt
IntroductionIn August 2026, Zscaler ThreatLabz identified a new loader, which we track as 2CLoader. ThreatLabz has observed the loader being used to distribute information stealers including Vidar and Remus in addition to XWorm RAT. 2CLoader has the ability to perform a wide range of anti-analysis and evasion techniques, including indirect system calls, anti-analysis checks, and installing Windows API hooks. In this blog post, ThreatLabz provides a technical deep…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 18c070b8d032336a244440df1115123d | High | Score 61/100 | First seen |
IOC Relationship Graph
Building graph…