TF-2019821
high
📛 Threat Title
Unknown Loader: Domain name that delivers a malware payload chaitanyaneetacademy.in
Description
Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Unknown Loader. Confidence: 75. First seen: 2026-11-08 00:26:31 UTC. Last seen: 2026-11-08 00:27:24 UTC. Reporter: varysz. Tags: etherhiding.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
chaitanyaneetacademy.in
UrlVoid 2 / 36
IOC database
- Type
- domain
- Value
chaitanyaneetacademy.in- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Domain name that delivers a malware payload attributed to Unknown Loader
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Unknown Loader. Confidence: 75. First seen: 2026-11-08 00:26:31 UTC. Last seen: 2026-11-08 00:27:24 UTC. Reporter: varysz. Tags: etherhiding.
Remediations (10)
-
web:cybersecuritynews.com
ROMULUS platform uses ClickFix traps, PowerShell scripts and fake installers to deliver malware and infect Windows systems.
-
web:ismalicious.com
13,980 indicators of compromise attributed to the Unknown Loader malware family — domains , IPs, URLs and file hashes, plus 1 exploited CVEs, from abuse.ch feeds.
-
web:reliaquest.com
Learn about the role of malware loaders in cybercriminal campaigns, their distribution methods, and strategies for detection and mitigation .
-
web:socradar.io
A malware loader is code whose primary purpose is to retrieve, unpack, inject, or execute another malicious payload . Loaders give operators a small initial foothold that can be updated with an infostealer, ransomware, remote access Trojan, or campaign-specific module after the victim is assessed. A loader is defined by its role in the infection chain, not by one file type or technique. Some ...
-
web:threatfox.abuse.ch
A malware sample can be associated with only one malware family. The page below gives you an overview on indicators of compromise associated with unknown_loader .
-
web:www.cyfirma.com
CYFIRMA has identified a multi- domain malware distribution campaign abusing the Indian Income Tax Department theme to deliver a malicious payload . The campaign deploys a network of ten fraudulent tax-themed domains designed to impersonate legitimate government communication and trick victims into ...
-
web:www.elastic.co
Elastic Security Labs uncovers OXLOADER: a new Windows loader using .reloc section abuse and anti-VM checks to drop infostealer malware via Google Ads.
-
web:www.forescout.com
Threat hunting researchers at Forescout's Vedere Labs uncover a new multi- payload ClickFix delivery platform. See how it works and how to detect.
-
web:www.malwarebytes.com
We found PavinLoader being used across ClickFix, fake software, and RenPy campaigns to deliver Amatera Stealer and other malware .
-
web:www.packetlabs.net
Loader malware plays a critical role in the middle stages of the cyber attack lifecycle. Explore how attackers use it to import various types of malware in the attacker's environment.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.