Tool
WLDR
- First Reported
- Jul 16, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (1)
- Talos also discovered that UAT-11795 uses a previously undocumented PowerShell C2 framework called WLDR, which uses encrypted (PBKDF2-SHA256) beaconing and communications, operates entirely in memory, and binds payload UAT-11795 Uses Trojanized Software Installers to Deploy Starland RAT
Malware (3)
Threat Actors (1)
MITRE ATT&CK (13)
Products (6)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
