admiralty-scale:source-reliability="b",admiralty-scale:information-credibility="2",DOTRUNPEX,Loader,feedly:source="Sekoia.io Blog",malware_classification:malware-category="Downloader",osint:source-type="blog-post",misp-galaxy:mitre-attack-pattern="Symmetric Cryptography - T1573.001",misp-galaxy:mitre-attack-pattern="Impair Defenses - T1562",misp-galaxy:malpedia="vidar",misp-galaxy:malpedia="XLoader",misp-galaxy:malpedia="Agent Tesla",misp-galaxy:malpedia="AsyncRAT",misp-galaxy:malpedia="Ave Maria",misp-galaxy:malpedia="DarkCloud Stealer",misp-galaxy:malpedia="LgoogLoader",misp-galaxy:malpedia="RedLine Stealer",misp-galaxy:malpedia="SectopRAT",misp-galaxy:malpedia="Stealc",misp-galaxy:mitre-malware="Agent Tesla - S0331",misp-galaxy:mitre-malware="WarzoneRAT - S0670",misp-galaxy:mitre-tool="QuasarRAT - S0262",misp-galaxy:mitre-tool="Remcos - S0332",misp-galaxy:rat="AsyncRAT",misp-galaxy:stealer="Vidar",misp-galaxy:stealer="DarkCloud Stealer",misp-galaxy:tool="FormBook",misp-galaxy:tool="Agent Tesla",misp-galaxy:malpedia="BitRAT",misp-galaxy:mitre-malware="WannaCry - S0366",misp-galaxy:mitre-attack-pattern="Spearphishing Attachment - T1566.001",misp-galaxy:mitre-attack-pattern="Shared Modules - T1129",misp-galaxy:mitre-attack-pattern="Ingress Tool Transfer - T1105",misp-galaxy:mitre-attack-pattern="Disable or Modify Tools - T1562.001",misp-galaxy:mitre-attack-pattern="Deobfuscate/Decode Files or Information - T1140",misp-galaxy:mitre-attack-pattern="Obfuscated Files or Information - T1027",misp-galaxy:mitre-attack-pattern="Dynamic API Resolution - T1027.007",misp-galaxy:mitre-attack-pattern="Reflective Code Loading - T1620",misp-galaxy:mitre-attack-pattern="Web Protocols - T1071.001",misp-galaxy:mitre-attack-pattern="Standard Encoding - T1132.001",misp-galaxy:mitre-attack-pattern="Data Obfuscation - T1001",tlp:clear