Loading malware…
Trojan.Siggen31.34463 is a trojan written in the Go programming language. According to the provided content, it is designed to download additional malware onto infected systems, specifically various miner trojans and adware. It is described as a DLL located at %appdata%\utorrent\lib.dll and is launched by exploiting a DLL Search Order Hijacking vulnerability in the uTorrent client. The content lists it among the most common threats detected by Dr.Web on protected devices in Q4 2025, Q1 2026, and Q2 2026. High-confidence indicators and behavioral details directly mentioned in the content are the file path %appdata%\utorrent\lib.dll, use of DLL search order hijacking for execution, the Go implementation, and its role as a downloader for miner trojans and adware.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
2 distinct techniques documented for this family, organized by ATT&CK tactic.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A Go-based trojan DLL that downloads miner trojans and adware, using DLL search order hijacking via the uTorrent client for execution.
Go-based trojan downloader delivered as a DLL that abuses DLL search order hijacking in uTorrent to load and then download miner trojans and adware.
Go-based DLL loader/downloader dropped as %appdata%\utorrent\lib.dll; abuses DLL Search Order Hijacking in uTorrent to execute and then downloads miner trojans and adware.
Go-based downloader (DLL at %appdata%\utorrent\lib.dll) that leverages DLL Search Order Hijacking in the uTorrent client to execute, then downloads miner trojans and adware.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.