Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

Technical Analysis of 2cloader | Threatlabz

ORKL Threat Library
ORKL Threat Library
Original Report

Malware Families

Excerpt

https://www.zscaler.com/blogs/security-research/2cloader-new-malware-loader-delivering-vidar-and-remus Technical Analysis of 2CLoader | ThreatLabz By Muhammed Irfan V A Published: 2026-09-30 · Archived: 2026-10-09 02:01:14 UTC The following sections analyze 2CLoader’s core features and cover malware delivery trends associated with the loader. String encryption Important strings in 2CLoader are decrypted at runtime using an inlined bitwise XOR operation applied to global…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREaware-cr1.comCAPABILITYCobalt StrikeVidarVICTIMunknown
Adversary
Infrastructure(1)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainaware-cr1.comHighScore 67/100First seen
MD518c070b8d032336a244440df1115123dHighScore 61/100First seen

IOC Relationship Graph

Building graph…