IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE1 IOC

2CLoader: A New Malware Loader Delivering Vidar and Remus

ZT
Zscaler ThreatLabz
Published September 30, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYCobalt StrikeVidarXWormVICTIMunknown
Adversary
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
MD518c070b8d032336a244440df1115123d
file-hashintel-blogloader
High
61
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
MD5
MD51Malware3REPORT2CLoader: A New Malware LoCobalt StrikeVidarXWorm
scroll to zoom · drag to pan · click IOC to open