MalwareBazaar Database
This page shows some basic information the YARA rule Lold_Loader_Implant_CFG_V1 including corresponding malware samples.
Database Entry
| YARA Rule: | Lold_Loader_Implant_CFG_V1 |
|---|---|
| Author: | Daydream |
| Description: | Lold/1.0 (Lold.UpdateClient) x64 C++ loader/implant and verbatim outer PE wrappers: matches the .loldcfg (LOLD_CFG_V1) configuration section, Lold/1.0 User-Agent, Local\Lold_ mutex, --lold-container CLI flag, and rs42 Reed-Solomon RS(4,2) chunk assembly strings |
| Firstseen: | 2026-11-01 11:34:26 UTC |
| Lastseen: | 2026-11-01 14:25:47 UTC |
| Sightings: | 3 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|