Loading malware…
SeroXen is a remote access trojan (RAT). Trend Micro describes it as gaining popularity for its stealth and notes that recent iterations target gamers, enthusiast communities, and organizations. Trend Micro also states that SeroXen incorporates an updated BatCloak engine as its loading mechanism, tying it to heavily obfuscated batch-file execution designed to evade security controls and persistently avoid detection. Supporting reporting on DOSfuscation additionally lists SeroXen among malware families associated with obfuscated Windows batch/CMD scripts, including infection chains where phishing emails deliver ZIP archives containing disguised .lnk shortcut files that launch cmd.exe with obfuscated commands. High-confidence behavior from the provided content therefore links SeroXen to stealth-focused delivery and loading via obfuscated batch/CMD mechanisms and BatCloak-based protection. Mention contexts also associate SeroXen with DarkWatchman RAT, Mélofée, and AlienReverse implants. No specific IOCs for SeroXen itself are provided in the content.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Referenced as a malware family observed leveraging obfuscated DOS/batch scripts.
RAT referenced as used in campaigns involving system information discovery (no further functional detail provided).
A remote access trojan (RAT) described as gaining popularity for stealth; in newer iterations it targets gamers, enthusiast communities, and organizations, and is described as incorporating BatCloak as its loading mechanism.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.