script[.]windowsDomain

Reported by 1 independent source · first reported 31 Mar 2026 by Zscaler ThreatLabz · last reported 31 Mar 2026

Last reported 6 months ago

What the reports say

1 report, newest first · the exact sentence from each

“…er checks.The table below shows Xloader’s network commands.Command IDDescription1Executes one of the following file types.PowerShell script[.]Windows executable (EXE) file.Windows DLL file.2Updates Xloader.3Xloader removes itself from the compromised host.4Depending on the command…”

Zscaler ThreatLabzVendor31 Mar 2026
Latest Xloader Obfuscation Methods and Network Protocol

named in the same reports

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

obfuscation[.]in
8.1[.]in
8.1[.]network
actions[.]network
layers[.]network
specified[.]as
data[.]as
file[.]windows

Thanks — we review every report.

Report a wrong value