Tag: custom pe loader

1 Attack Reports | 0 Vulnerabilities

Attack reports

NANOREMOTE, cousin of FINALDRAFT

A newly discovered Windows backdoor called NANOREMOTE shares similarities with previously known malware FINALDRAFT. NANOREMOTE's key feature is using the Google Drive API for data exfiltration and payload staging, making detection challenging. The malware includes a task management system for file …
command execution
finaldraft
2025-12-10
custom pe loader
file exfiltration
google drive api
nanoremote
task management
windows backdoor
wmloader
Published: December 10, 2025
Downloadable IOCs: 5
Click here to see more Attack Reports