TF-MAL-ps1.sload

Description

ThreatFox malware family `ps1.sload`. Printable name: sLoad. Aliases: Starslord.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Breaking Down the Most Effective Malware Remediation Processes
  web:blog.rsisecurity.com

  Malware attacks are increasingly common cybersecurity concerns, as threat actors devise new, sophisticated approaches to infiltrate IT systems. As a result, every organization needs an effective malware remediation process to identify and mitigate malware attacks early on. Read on to learn about best practices for your organization. What are the Most Effective Malware Remediation Processes ...

  2026-05-22 05:31 UTC
• One Size Doesn't Fit All: A Dynamic Heterogeneous Learning Ensemble for ...
  web:dl.acm.org

  In response, Artificial Intelligence (AI) models are increasingly leveraged to enhance malware classification and remediation efforts. However, while such models trained to classify malware datasets often perform well in controlled environments, research increasingly shows that conventional AI-based malware classifiers struggle to generalize to ...

  2026-05-22 05:31 UTC
• sLoad (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  sLoad is a PowerShell downloader that most frequently delivers Ramnit banker and includes noteworthy reconnaissance features. The malware gathers information about the infected system including a list of running processes, the presence of Outlook, and the presence of Citrix-related files. sLoad can also take screenshots and check the DNS cache for specific domains (e.g., targeted banks), as ...

  2026-05-22 05:31 UTC
• Kaspersky Threats — Trojan-Downloader.MSOffice.SLoad.gen
  web:threats.kaspersky.com

  Malware , tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.

  2026-05-22 05:31 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 05:31 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:31 UTC
• PDF Joint Cybersecurity Advisory - AA20-245A - Technical Approaches to ...
  web:www.cisa.gov

  This joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.1 It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices.

  2026-05-22 05:31 UTC
• Multi-stage downloader Trojan sLoad abuses BITS almost exclusively for ...
  web:www.microsoft.com

  Many of today's threats evolve to incorporate as many living-off-the-land techniques as possible into the attack chain. The PowerShell-based downloader Trojan known as sLoad , however, puts all its bets on BITS.

  2026-05-22 05:31 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:31 UTC
• sLoad Malware - Malware removal instructions (updated) - PCrisk
  web:www.pcrisk.com

  What is sLoad ? sLoad (also known as StarsLord) is the name of malicious software that infects operating systems with other malware (e.g., a banking Trojan or ransomware). In this way, sLoad operates as a malware downloader/dropper. Research shows that cyber criminals proliferate sLoad via spam campaigns (emails) - i.e., through malicious documents attached to email messages. If you believe ...

  2026-05-22 05:31 UTC

Only Available for Registered Users. Sign in to view.