[Voltron]

Hi all,

Any have had experience with this seems to be "new" downloader? Does somebody know where the sample classification comes from?

https://virustotal.com/pt/file/03f8335f ... /analysis/

Seems to be the same as:

https://virustotal.com/pt/file/b2faacfe ... /analysis/
https://virustotal.com/pt/file/6434bddd ... /analysis/


Thanks,

[maddog4012]

I think this one is more likely a variant of Kovter or something in that family

[Seifreed]

As maddog said is Win32/RaaLoader downloading a PE file (related to kovter campaigns)