Loader 2.exe
Classification: Malicious
Loader 2.exe is a malicious file sample (Windows 64-bit executable). Linked to Windigo activity. Reported by 4 threat sources, last seen 2026-10-08.
Detection summary
- 0 antivirus detections
- 4 IDS alerts
- 0 processes observed
- 3 contacted hosts
- 2 DNS requests
MITRE ATT&CK associations
Intrusion sets: WINDIGO (G0124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Windigo | Cyber Threat Alliance | 2026-10-08 16:00:05 | 2026-10-08 16:00:05 | malicious-activity | G0124 Windigo |
| Salatstealer | Triage | 2026-09-23 16:21:22 | 2026-09-23 16:21:22 | malicious-activity | |
| CoinMiner | MalwareBazaar Abuse.ch | 2026-09-23 16:20:36 | 2026-09-23 16:20:36 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2026-09-23 03:45:06 | 2026-09-23 03:45:06 | malicious-activity |
Tags
evasive salatstealer xmrig credential_access defense_evasion discovery execution miner persistence privilege_escalation spyware stealer trojan upxSample information
- Filenames
- Loader 2.exe
- File type
- PE32+ executable for MS Windows 6.00 (GUI), x86-64 ...
- MD5
d949ee2b9cbd2460cdbf515367dabe91- SHA-1
1be938109d495a23af41864c49e3d9ed8f12a077- SHA-256
171f60c9f73ab592d41bd157753577dcf2b417f5491bb0a994d9c914b75c6aaa- First indexed
- 2026-09-23 03:08:21
- Last updated
- 2026-09-23 17:15:13