TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.5K subscribers
Post #32714 20
#ParsedReport #CompletenessMedium
23-09-2026

Meet AvisLoader: A Windows Loader Built to Outlast a Takedown

https://www.varonis.com/blog/meet-avisloader-a-windows-loader-built-to-outlast-a-takedown

Report completeness: Medium

Threats:
Avisloader
Clickfix_technique
Themida_tool
Vmprotect_tool
Uac_bypass_technique
Uacme_tool
Icmluautil_tool

TTPs:
Tactics: 2
Technics: 6

IOCs:
Path: 1
Hash: 3

Soft:
Cloudflare, DocuSign, trycloudflare, macOS, Component Object Model, Twitter

Win API:
NtQuerySystemInformation

Languages:
vbscript
Varonis Meet AvisLoader: A Windows Loader Built to Outlast a Takedown Varonis Threat Labs discovered AvisLoader, a new Windows malware loader built to keep its command-and-control (C2) channel beyond the reach of traditional domain takedowns.
More from @aptreports
  1. Sep 28, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Sep 28, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Sep 28, 2026#ParsedReport #CompletenessMedium 23-09-2026 Inside a multi stage toll fraud operation tar…
  4. Sep 28, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Sep 28, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Sep 28, 2026#ParsedReport #ExtractedSchema Classified images: windows: 6, code: 2, dump: 3, schema: 2
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →