NomadRAT DLL sideload via renamed AV binary Acrobatlog.exe loading scansts.dll

Adarsh Pandey@Pandeyadarsh

•updated Aug 25, 2026•0•0•1

Detects the process 'Acrobatlog.exe' loading the library 'scansts.dll'. This behavior is potentially indicative of DLL injection or side-loading techniques aimed at executing malicious code within the context of a legitimate or masquerading process.