logo

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

ID: fd248db6-b673-5bc8-8172-e4485d0492fd

STIX ID: report--fd248db6-b673-5bc8-8172-e4485d0492fd

Feed Name: The Hacker News

Threat Score
75/100

Date Published: 2024-01-30

Date Updated: 2026-04-24

Author: [email protected] (The Hacker News)

...
...

**ZLoader returns:** Threat hunters have observed a new campaign delivering updated ZLoader 64-bit variants (2.1.6.0/2.1.7.0) that add RSA encryption in the loader, an updated domain generation algorithm as a fallback, RC4-protected static configuration, filename checks to evade sandboxes, and other obfuscation measures; distribution is via phishing, malicious search ads and MSIX installers, and the loader is expected to facilitate ransomware and information-stealing follow-on payloads.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.