#ParsedReport #CompletenessMedium
09-10-2026

WinLol: A Multi-Stage Rust Dropper Delivering a WebRTC Remote Desktop RAT

https://hatching.io/blog/triage-insights-ep5-short/

Report completeness: Medium

Threats:
Winlol
Motw_bypass_technique
Webrtc_technique
Uac_bypass_technique
Dll_sideloading_technique

Victims:
Gamers

Geo:
Chinese

TTPs:

IOCs:
File: 8
Hash: 18
Domain: 3
IP: 3

Soft:
WebRTC

Algorithms:
sha256, xor, base64

Win API:
ShellExecuteA

Languages:
rust